Trusted Computing Group today announced that it has certified four products, including a Trusted Platform Module (TPM) and three products supporting the group’s security automation protocol, IF-MAP. TCG’s certification program ensures that implementations of its specifications are complete and consistent.

STMicroelectronics has been certified for its ST33TPM12LPC TPM. Powered by the highly secure 32-bit ARM SC300 SecurCore CPU, ST’s Trusted Platform Module guards sensitive data such as keys, passwords and digital certificates, and provides trustworthy reports of system integrity while protecting against threats such as software attacks or theft and tampering. The ST33TPM12LPC (LPC version) has completed a Common Criteria (CC) security evaluation and has received EAL4+ certification by the French certification body in July 2012. That security certification as well as the functional compliancy allows the product to be certified by the TCG as a TPM certified product.

The U.S. National Institute for Standards and Technology (NIST) recently issued a recommendation to deploy TPMs as protection against a variety of security threats. More than 500 million systems and devices are protected by the TPM.

Three organizations also have certified their implementations of the TCG IF-MAP (Interface for Metadata Access Point) that coordinates and automates security across a wide variety of devices and applications via a standards-based publish/subscribe model.

The Trust@FHH research group (FH-Hannover) has certified its irond open source IF-MAP server. The server was developed as part of the group’s overall efforts towards leveraging the capabilities of IF-MAP in various research projects, such as ESUKOM. irond is written in Java and can thus be easily deployed on a wide range of platforms. Trust@FHH is a liaison member of the Trusted Computing Group and has contributed to several specifications.

Infoblox received certification for its Orchestration Server (IBOS). Infoblox, a member of the Trusted Computing Group, has contributed to the IF-MAP standard and was the first company to offer an enterprise-ready, high performance platform for IF-MAP deployments. Infoblox Orchestration Server delivers the IF-MAP standard approach for automating systems, processes and applications. It can be used to aggregate and distribute metadata to and from a very wide range of systems, including:

• Network infrastructure systems, including routers, switches, load balancer, and DNS/DHCP servers
• Network security systems such as firewalls, intrusion detection/prevention systems (IDS/IPSs), endpoint scanning/compliance systems, policy servers and security information and event management (SIEM) systems
• Authentication systems, such as RADIUS and Microsoft Active Directory systems
• Building control, factory automation, smart grid and other physical control systems
• Asset management, ERP, CRM, HR and other business applications

omapd certified an open source IF-MAP Server, which implements the IF-MAP 1.1 and 2.0 specifications. omapd is written in C++ using the Qt Framework from Nokia. Qt was chosen for its excellent network, XML, and container classes; multi-platform support; and LGPL licensing.

Products certified by TCG website are listed at http://www.trustedcomputinggroup.org/certification.

About Trusted Computing Group

TCG is an industry standards body formed to develop, define, and promote open standards for trusted computing and security technologies, including hardware building blocks and software interfaces, across multiple platforms, peripherals, and devices. TCG specifications are designed to enable more secure computing environments without compromising functional integrity with the primary goal of helping users to protect their information assets from compromise due to external software attack and physical theft. More information and the organization’s specifications are available at www.trustedcomputinggroup.org.

Brands and names are the property of their respective owners.

Tweet this: STMicro #ST_World, #TPM, 3 IF-MAP servers for security automation certified by @Trustedcomputin http://bit.ly/R76ohR