Infineon offering world’s first TPM 2.0 with open-source software

Trusted Platform Modules (TPM) enable secure and remote software updates, disc encryption, and user authentication — meaning they’re crucial for connected industrial, automotive, and other embedded devices.

To further facilitate seamless integration in Linux-based systems, Infineon Technologies AG now provides its latest OPTIGA TPM 2.0 solution with a comprehensive TSS host software, implementing the latest FAPI standard. Infineon has developed the open-source software jointly with Intel Corporation and Fraunhofer Institute for Secure Information Technology SIT.

By using Infineon’s plug-and-play OPTIGA TPM 2.0, IoT system integrators can significantly improve the security of connected products. Software integration with TSS-FAPI does not require specific skills in low-level security specifications and reduces source code development by a factor of up to 16.

Therefore, expenses and time to market can be reduced. Additionally, manufacturers can accelerate the process for certifying their industrial devices according to the IEC 62443 standard for industrial applications, which requires hardware-based safety from Level 4 upwards.

The FAPI specification has been released recently as an international standard by the Trusted Computing Group (TCG). The specification is implemented in the TSS Stack 1, together with the associated tools and plug-ins. The TSS stack is open-source software, which allows seamless integration of the TPM 2.0 in Linux-based systems. This includes the support of typical Linux software for device authentication, data encryption, software updates, and remote device management.

In addition, the FAPI enables the native support of the PKCS#11 standard as a generic interface for user authentication, single sign-on, and e-mail encryption/signing. The FAPI provides a default configuration for cryptographic functionalities, system integration, and automated processing of security mechanisms according to the latest industrial best-practices.

The OPTIGA TPM acts as a vault for sensitive data in connected devices and lowers the risk of data and production losses due to cyberattacks. Infineon’s TPMs are certified by independent certification bodies according to Common Criteria, an international set of guidelines and specifications developed for evaluating information security products. The TSS stack including the recent FAPI has been verified with the Infineon TPM portfolio to achieve compliance and interoperability.