Endorsement key

• Endorsement key + Endorsement Certificate

  • Asserts that a public key is the PubEk of a genuine TPM
  • Only the TPM knows the private part of the key
  • The private key is only used to decrypt data for use by the local platform
  • Public part is exportable

Notes: