Register for free to join our community of investors and share your ideas. You will also get access to streaming quotes, interactive charts, trades, portfolio, live options flow and more tools.
Register for free to join our community of investors and share your ideas. You will also get access to streaming quotes, interactive charts, trades, portfolio, live options flow and more tools.
allman if I may butt in...
You wrote:
"If Wave is to have a chance, then there must be a key-loading server at point of manufacture. Can you carry that point any further?"
Actually if the TCG is to have a chance...
Endorsement key loading is utterly necessary if attestation is to work properly. Wave is showing the TCG and the TCG TPM OEMs how to accomplish this. I believe it is still a work in progress.
go-ks et al
I think eamonnshute (thanks) is suggesting that the Get New Services option in the ETS dialog box is for Premium Services/other.
go-ks, I think you are correct that ETS will feature auto updates/check for updates in the software. Good point. Thanks.
http://www.investorshub.com/boards/read_msg.asp?message_id=1595767
rachelelise
I think Doma's point about the ETS Launch Pad is excellent. This is included in ETS Business Edition and perhaps/hopefully in the Intel and NSM bundlings as well. Our hope should be that the ETS Launch Pad or somewhere else contained in the bundled ETS or the Business Edition ETS will be a link to Premium Services. Somebody should e-mail management about this.
My guess is that Premium Services will be marketed in the ETS download, but it can't hurt to ask Wave.
awk
from backup and migration of critical security data to identity services..."
That's gotta be KTM and ACM respectively...which of course is just a taste of what's to come.
You're right...things are good!
Thanks jparis. Nice work! e/
DoD update:
http://jitc.fhu.disa.mil/pki/vendor/wave_systems_smart_safe_signature.html
"Errors encountered in Assessment. Waiting on next version of software."
This is a change from the last time I checked. Previously it was only "Errors encountered in Assessment."
Doma
you meant Gateway, right?
Dell.........TCG Adopter....(it's 100% certain)
Wildman, that happened with the NSM SafeKeeper...at least that is what NSM told me.
Dated Oct. 10, 2003
Hello,
In response to your request:
Thank you for your interest in National Semiconductor's SafeKeeper
device,
PC21100. We are currently only supporting OEMs in the PC industry in
designing in this device. We are not adequately resourced to engage
with
smaller, special-purpose companies.
The PC21100 is fully released product, but because of our PC focus, we
are
only selling to those, specialized accounts.
Lucky
If you have expertise in marketing, I encourage you to share your ideas with the appropriate department at Wave. In the process you might get some substantive updates!
I recommend e-mailing Wave. I have had quite some success with it. I think brainstorming by shareholders has actually been of some benefit to management over the years, and with the number of opportunities that face the company now, the potential benefit is even greater.
Please try this if you haven't already:
Public Relations
Wave Systems Corp.
John Callahan
Vice President, Marketing Communications
413-243-7029
email: jcallahan@wavesys.com
Lucky
There are many marketing ploys, including the value-added reseller channels.
When I see HP embracing the ETS (Embassy Trust Suite) as they do by announcing/posting Wave as a business partner on their website, and you know every single TPM producer/user vendor/OEM in the TCG, understands/recognizes the importance and value of the ETS, I wonder why HP does not want to insure that ETS CD is shipped with all their machines! Do we have some reason to hope that is the plan?
awk
Now that you mention the HP daughter board with Infineon TPM, I remember that.
From Wave's perspective I should think they would view favorably the shipping of the basic ETS CD with as many machines as possible.
1. We know ETS CD ships with Intel motherboard D865GRH.
2. We might assume the NSM Sakekeeper TPM ships with the ETS CD. I don't know if some other means of delivery is possible.
3. We could speculate that Infineon has not done a Wave bundling deal knowing that it's possible the Intel/Wave bundling deal, once ubiquitous, would lead to duplication of Wave bundling. We know that the Intel/Wave product is intended initially for whiteboxes but this could spread to the greater market.
4. Similiar situation for Atmel...namely, no Wave bundling anticipating more ubiquitous Intel/Wave bundling.
Let's face it...the more of those Wave CDs that come bundled with the equipment, the better off we are!...not that various other marketing/education initiatives are not relevant.
Weby
I presume/hope that HP gets it's mobos from Intel. If so, that would explain why HP is not directly bundling Wave, knowing that Intel is. Of course, we don't know how ubiquitous will become Intel's bundling of Wave but we might be optimistic.
Does anybody know if HP machines use Intel mobos?
Doma
I don't know how long the D865GRH has been shown on the website, but when it was recently discovered there I assumed the product was ready and would thus be shipping to OEMs. Very recently I e-mailed Intel inquiring about the D865GRH and was informed that the company policy is to never pre-release info on products under development or to any way discuss developing technologies.
http://www.intel.com/design/motherbd/rh/index.htm?iid=ipp_browse+motherbd_featuredd865grh&
My hunch is that your link is retail for the consumer and the product is already shipping to OEMs.
Good find btw.
http://www.intel.com/buy/wtb/wtb1022.htm
Thanks eamonnshute...must mean Gateway is planning on using somebody's TPM or could be the Intel mobo.
I missed the Gateway connection. I see them listed as a TCG adopter...any specifics?
TIA
Right Doma re: Dell...compelling logic! e/
Thanks Doma...missed the PIM on the webite. Still interesting though that it is being withheld from the ETS Business Edition.
Anybody noticed how the website has a little bit of a different look to it? I notice that the bottom half is vacant...interesting.
http://www.wave.com/
I missed this on earlier readings...powerful sounding stuff:
"EMBASSY technology includes embedded libraries and
firmware for the silicon providers to license."
Btw, Private Information Manager (PIM) is nowhere to be found on the website...along with ACM and KTM, another unreleased Premium Service perhaps?
This is essentially a preview of a to date unannounced expanded ETS.
http://www.ceocast.com/company.cfm?cid=314
KEY PRODUCTS
Wave is building the infrastructure and services to
enable the deployment and management of trusted
computing platforms. The services and infrastructure
are designed to be flexible and deliver solutions
within the framework of such industry initiatives as
the Trusted Computing Group.
For certain markets, including government, national
security and health care, Wave has delivered
programmable EMBASSY® chip-based technology that
enables the establishment of a network of hardware
trusted clients – embedded in personal computers,
peripherals such as smart card readers and keyboards,
and mobile devices.
For the broader personal computer markets, Wave has
developed and is delivering EMBASSY Trust Suite
software services technology that is available in
cryptographically-protected solutions as enabling
utilities and end-to-end client server solutions for
products from leading silicon suppliers such as Intel,
National Semiconductor and Infineon Technologies.
EMBASSY technology includes embedded libraries and
firmware for the silicon providers to license.
An important example of the momentum towards trusted
computing is the recent formation of the Trusted
Computing Group (TCG), an industry organization
dedicated to embedding trust and security more broadly
into computing platforms and devices. The TCG has
defined a semiconductor device known as the Trusted
Platform Module (TPM) to serve as a root of trust for
protected activities on enabled platforms. TPMs
provide the trusted hardware resources used by Wave
services to extend trusted functions within a PC.
Through acceleration of the design, use, management
and adoption of trusted systems for a variety of
computing platforms, the TCG is helping enterprise
computer users realize increased security through open
standards. Earlier this year, Wave was among the
initial industry leaders in promoting the TCG to
develop, define, and promote hardware-enabled trusted
computing and security technologies, including related
hardware building blocks and software interfaces,
across multiple platforms, peripherals and devices.
Wave applications and services on the Trusted
Platforms make a secure, high-value, services-rich
computing platform available to enterprises and
personal computer manufacturers. These capabilities
are compliant with the recently announced Trusted
Computing Group (TCG) specifications.
EMBASSY Trust Suite - Wave Systems' Client and Server
Solutions
Wave Systems has identified the need for an
introductory set of services on the enterprise desktop
and mobile platforms in order to accelerate the user
value of the trustworthy computing initiative. The
company has developed the EMBASSY Trust Suite as a set
of secure services that introduce the user to
value-added applications in a manner that is intuitive
and simple.
The current portfolio includes:
Document Manager Vault – Used for document encryption,
decryption and client-side storage for important
corporate documents. Documents are securely stored and
easily accessible to the authorized user. The
easy-to-use vault, utilizing a Microsoft Office
interface, protects against unauthorized access from
network snoopers and hackers.
Private Information Manager – Uses the TPM to securely
and efficiently store user information, such as user
names, passwords and other personal information. The
PIM intelligently retrieves login information for
logging in to web sites.
Smart Signature – This digital signature and document
storage capability includes signing keys generated by
the TPM. Smart Signature is an Adobe Acrobat plug-in
solution that is ideal for contracts or any other
customized document or form requiring signature.
Included is a platform registration capability for
storing and recovering trusted platform registration
information.
Attestation Credential Manager – The ACM provides
capabilities for any application to ensure that it is
transacting with a trusted platform. It issues TPM
identity credentials and certified credentials to
provide attestation to a third party that a platform
is trusted, and revocation checking ensures that the
credentials are valid.
Key Transfer Manager – This capability provides backup
and restore, migration and maintenance options to the
TPM environment. The Key Transfer Manager addresses
application data backup for events such as hard drive
failures and accidental deletion.
tampa123, I agree that your analysis is great...barge just beat me with the response.
barge I think it is going to hard for potential competitors to keep up with the Premium Services providing Wave is able to maintain their lead by continuing to add those ladder rungs in advance. I like Wave's chances to stay ahead.
Right on allman. Thanks for your input. e/
How's this?:
ETS= Embassy Trust System
ETs= Embassy Trust Suite
Big S and junior s? LOL!
rachel, you write:
"If nothing else, the continued deferrals of timelines within this space speaks to where things really are after all of this focus."
Our sleuthing around the Intel website and bugging NSM with e-mails points towards the fact that the NSM SafeKeeper is fully released to OEMs and presumably shipping, and that the Intel D865GRH MB bundled with a Wave CD is shipping. This is progress...finally we have some confirmation of timelines discussed in the last CC and the ASM.
We would really like to know if ETs Business Edition product is moving through the website to any TPM user (it works with all of them) or otherwise being delivered to that existing base of IBM ThinkPad users.
We would also love to know if EK-loading of TPMs currently being manufactured by all three vendors NSM, Infineon and Atmel has been perfected. If so, TPMs are now rolling out third party-attestable, more readily enabling Wave's ACM and KTM, which we presume are the inaugaral revenue-generating "Premium Services".
rachelelise
I would agree that the cost for Trusted computing should and will be passed along to the end user. I think it's convenient and fitting that a new player like Wave, instead of a huge established player, is carving out a new services space. I think it's important that whoever does trusted infrastructure management be independent from established giants like MSFT and huge OEMs for example.
rachelelise, do you know what variety of sources pay for Verisign's digital certificates? Your point about who pays for Wave is highly valid. I say Wave is services...is Electronic Data Services an example of services?
rachelelise, yes trying to follow closely but my mind can be a brick!
I think you got it right...Premium Services are server solutions and the basic services are local to the PC itself (not networked and therefore not really TC).
Yes, I would expect value-added reselling to be of considerable importance in marketing the network stuff (and the basic stuff?). Thanks.
awk
If you can believe my judgement anymore (LOL!), I would say KTM (back-up and restore migration) is a Premium Service along with ACM, and both are killer apps. KTM prevents the brick thing and ACM launches the TPM TC network thing.
Doma/awk/others who are bothering to listen to me...sorry for the misinformation
After reviewing the Intel TPM Quick reference Guide, I can see that I mistook "recovering the TPM" with "back-up and restore migration" solutions as described in the TCG catalog. .
Indeed Doma, I believe you are correct, that the Infineon software would be used to restore the D865GRH TPM, but only within the PC's local domain. So, I am not sure what role, if any, the Embassy Trust Suite (ETs) would play specifically in that limited role. The real action will be in network attestation by third party servers, which is where Premium Services like KTM and ACM come into the picture.
So awk, I misunderstood to situation to call both ACM and KTM as being applicable to local data (non-network attestable) and therefore included with the free ETs (to be expanded later to network access as paid-for premium services). I assume, as actually I did before today, that the first three (client) services in the ETs portfolio come bundled as standard and free to the user, while the last two (server) services (ACM and KTM) are Premium and will be extra cost to the user. I assume ACM and KTM are applicable only to Wave's attestation servers. Maybe KTM has value in "local" situations...I can't tell.
EMBASSY Trust Suite - Wave Systems' Client and Server Solutions
Wave Systems has identified the need for an introductory set of services on the enterprise desktop and mobile platforms in order to accelerate the user value of the trustworthy computing initiative. The company has developed the EMBASSY Trust Suite as a set of secure services that introduce the user to value-added applications in a manner that is intuitive and simple.
The current portfolio includes:
Document Manager Vault – Used for document encryption, decryption and client-side storage for important corporate documents. Documents are securely stored and easily accessible to the authorized user. The easy-to-use vault, utilizing a Microsoft Office interface, protects against unauthorized access from network snoopers and hackers.
Private Information Manager – Uses the TPM to securely and efficiently store user information, such as user names, passwords and other personal information. The PIM intelligently retrieves login information for logging in to web sites.
Smart Signature – This digital signature and document storage capability includes signing keys generated by the TPM. Smart Signature is an Adobe Acrobat plug-in solution that is ideal for contracts or any other customized document or form requiring signature. Included is a platform registration capability for storing and recovering trusted platform registration information.
Attestation Credential Manager – The ACM provides capabilities for any application to ensure that it is transacting with a trusted platform. It issues TPM identity credentials and certified credentials to provide attestation to a third party that a platform is trusted, and revocation checking ensures that the credentials are valid.
Key Transfer Manager – This capability provides backup and restore, migration and maintenance options to the TPM environment. The Key Transfer Manager addresses application data backup for events such as hard drive failures and accidental deletion.
T123, my assumption is that future upgrades will be downloaded from Wave's website and CDs, both.
Presently we are seeing free ETs bundled with the Intel MB as a CD ddownload, and I assume this is the same for NSM SafeKeeper. The ETs Business Edition is currently offered on Wave's website as a CD download, but I would expect to see this and/or future products eventually offered as online downloads.
awk
I am quite certain KTM, using Wave's attestation servers is a Premium Service, along with ACM, also using attestation servers. However I believe both ACM and KTM come free in the ETs, but's it's extra to make them both network (trusted third party) attestable. I need to 100% confirm this.
Doma
D865GRH Product Brief does not specify that TPM is by Infineon...but we know it is. Of course the Wave Embassy Trust Suite (ETs) is specified in the Product Brief as a CD download...this is expected, since Intel is bundling the Wave software product with their product.
http://www.intel.com/design/motherbd/rh/rh_productbrief.pdf
The Intel TPM Quick Reference Guide references the back-up restore migration features of the Infineon Security Platform software which can be assumed comes built into the Infineon TPM. The Infineon back-up and restore migration features are referenced first (Infineon supplies the TPM), then followed by the Wave ETs back-up and restore migration features.
ftp://download.intel.com/design/motherbd/articles/TPMQuickReference.pdf
My assumption is that if the D865GRH user opts to download the ETs, then the TPM user will then have KTM software for back-up and restore migration, but like the Infineon software this would be for LOCAL DATA USE ONLY. Of course the goal is for the user to further opt for Wave's attestation server services which would then make KTM network capable...a Premium Service.
Doma
Are you referencing the Intel TPM Quick Reference Guide?
awk, please see P.S. prior post. e/
awk
Do you agree with my hunch that the Wave mechanisms for back-up restore migration that are referenced in the Intel user guide (Quick Reference Guide) are included for free in the bundled Wave Embassy Trust Suite (ETs), including KTM, but to obtain network (trusted third party) attestation, including KTM for back-up and restore migration, the user would then pay Wave Premium Services?
I can understand the presentation in the Intel TPM Quick Reference Guide...Infineon Security Platform software is naturally mentioned ahead of Wave's ETs because Infineon provides the TPM.
Only Wave offers network back-up and restore migration capability. What's unclear is how this is being promoted to prospective TPM users. I would hope it is an agressive thrust...I am optimistic because without the "network" it's not trusted computing.
P.S. Wouldn't it be nice if a user-friendly interface for things like KTM found their way into the host's OS?
awk
"I have addressed this to the company and will report if and when I hear something on this subject."
Intel or Wave?
The difference between the IBM, Infineon and Wave back-up and restore migration products, is that Wave's uses an attestation server and Infineon's and IBM's do not. Again, I would say this is the case of local data (no attestation server) vs. network data (attestation server). Trusted Computing is of limited value until it is networked to trusted third parties.
My conclusion therefore is that the Wave KTM is far more robust than the Infineon TPM Professional Package (and the IBM User Verification Manager). Now...it's unclear to me if the Wave back-up/restore mechanisms included in the Intel TPM user guide is simply a "basic" (local data) version of the KTM or is in fact KTM (network data). In any case there must be education and marketing to prospective enterprise accounts now taking place...well, the difference between network attestation vs. none should be pretty apparent to prospective TPM users.
I believe the choice is; pay Wave a Premium Service for "network" (trusted third party) back-up and restore migration OR pay nothing and you can use either Wave "standard" (CD comes bundled with motherboard) Embassy Trust Suite or the Infineon Security Platform Software software for "local" (private network) back-up and restore migration.
From the TCG Solutions Catalog:
Back-up, Restore Migration Administration
Back-up and restore migration products provide IT administrators with the tools
to service users in case of a Trusted Platform Module (TPM) or platform
malfunction and also support upgrades to a new platform. Included capabilities
for secure remote archival of sensitive keys that have been established with the
platform properties. Additionally, retrieval of the archived information requires
authorized access based upon the security policy established at the initiation of
the archival process. While the keys can be restored to the original platform, the
primary purpose of back-up restore and migration in the TCG context is to
support the secure restore onto another platform.
Products that support these capabilities are noted below.
IBM User Verification Manager *(UVM) www.pc.ibm.com/us/security/index.html
IBM’s User Verification Manager serves as a translator between applications and
authentication devices. This middleware layer helps protect applications from
requiring knowledge of the authentication devices and manages the security
policies for the system. UVM provides an interface for applications. Via this
interface applications can have critical information stored securely by the UVM.
UVM also provides an interface for communicating with authentication devices.
Wave Systems Key Transfer Manager* (KTM) http://www.wave.com
KTM provides for enterprise control and management of the archived TPM data,
which surpasses any existing TCG backup and restore solutions available today.
It also provides a consistent way to utilize and secure access to enterprisemanaged
backup key(s).
KTM’s flexible, policy-driven server infrastructure is web-based and secured by a
Hardware Security Module (HSM). The KTM product includes the requisite
corresponding client utility and middleware. Wave Systems supports both
license and ASP* (Application Service Provider) models.
Key Transfer Manager* makes a complex issue easy to administer and allows a
business to manage its TPM-secured intellectual property assets securely. KTM
can be integrated with other products in Wave’s offering of the EMBASSY Trust
Suite Client and Server Solutions for a robust environment for trusted platforms.
Infineon Technologies* TPM Professional Package* http://www.infineon.com
The Infineon Management software enables the TPM user to back-up and
migrate their secrets. Migration enables the secure and user controlled transfer
of secrets to the TPM on another platform. The target PCs have to be authorized
by the system administrator to maintain the system security. This mechanism
allows users to utilize the secrets in a secure manner on different platforms. The
solution strongly separates administrator and users giving the administrator
policy rights but no access to the user data and secrets.
awk P.S.
Newest additions to the Embassy Trust Suite (ETs) portfolio:
Network data:
Attestation Credential Manager – The ACM provides capabilities for any application to ensure that it is transacting with a trusted platform. It issues TPM identity credentials and certified credentials to provide attestation to a third party that a platform is trusted, and revocation checking ensures that the credentials are valid.
Key Transfer Manager – This capability provides backup and restore, migration and maintenance options to the TPM environment. The Key Transfer Manager addresses application data backup for events such as hard drive failures and accidental deletion.
It's my impression that both of the above are Premium Services for which the user will pay some per seat fee. These services require the user's TPM to access network data (attestable/accessed by an independent trusted party). This works better if the TPMs are endorsement key-loaded at the point of fabrication.
I believe the below services, the first three in the ETs, are the Basic Services and are bundled with the NSM SafeKeeper (presumed to be currently shipping to OEMs) and are to be shipped (or are shipping) with the Intel motherboard.
Local data:
Document Manager Vault – Used for document encryption, decryption and client-side storage for important corporate documents. Documents are securely stored and easily accessible to the authorized user. The easy-to-use vault, utilizing a Microsoft Office interface, protects against unauthorized access from network snoopers and hackers.
Private Information Manager – Uses the TPM to securely and efficiently store user information, such as user names, passwords and other personal information. The PIM intelligently retrieves login information for logging in to web sites.
Smart Signature – This digital signature and document storage capability includes signing keys generated by the TPM. Smart Signature is an Adobe Acrobat plug-in solution that is ideal for contracts or any other customized document or form requiring signature. Included is a platform registration capability for storing and recovering trusted platform registration information.
awk, I see your point about the revenue model(s) becoming clouded or simply undefined...for sure evolution is taking place.
One comment however...you wrote:
"how are we compensated for the key management services? Nobody from the company has yet addressed that subject."
I believe Attestation Credential Manager and Key Transfer Manager are both key management services. These are the first two Premium Services in Wave's eTS (Embassy Trust Suite).
yukonwookie/wavehello, thanks. e/
fivewood, thanks for the news. Mind sharing your source? Once again my e-mail alert from Wave is delayed.
TIA
awk, downloadability of the eTS software directly from Wave's website is coming, albeit I don't know when.