6.1TPM架构 家北大学 Northeastemn University ● Non-Volatile Storage Non-volatile storage is used to store Endorsement Key (EK),Storage Root Key (SRK),owner authorization data and persistent flags. 非易失存储器：EK(2048bit)、EK证书、SRK(2048bit)及 所有者(Owner)授权数据160bit)等 Attestation Identity Keys (AlK) Attestation Identity Keys must be persistent,but it is recommended that AlK keys be stored as Blobs in persistent external storage (outside the TPM),rather than stored permanently inside TPM non-volatile storage. 专用于对TPM产生的数据（如TPM功能、PCR寄存器的值 等)进行签名的不可迁移的密钥，由TPM所有者生成。6.1 TPM 架构 ⚫ Non-Volatile Storage ❖ Non-volatile storage is used to store Endorsement Key (EK), Storage Root Key (SRK), owner authorization data and persistent flags. 非易失存储器：EK(2048bit)、 EK证书、SRK(2048bit)及 所有者(Owner)授权数据(160bit)等 ⚫ Attestation Identity Keys (AIK) ❖ Attestation Identity Keys must be persistent, but it is recommended that AIK keys be stored as Blobs in persistent external storage (outside the TPM), rather than stored permanently inside TPM non-volatile storage. 专用于对TPM产生的数据（如TPM功能、PCR寄存器的值 等）进行签名的不可迁移的密钥，由TPM所有者生成