Wave Systems Corp. (fka WAVXQ)

[wavedreamer]

Blue,

How do you interpret this from the DOD and NSA?

You are a word smith beyond doubt so I'm curious how do you read and understand these words?

(19) Basic input and output systems (BIOSs) will be managed in accordance with Section 3.2 of SP 800-147 (Reference (ds)). Specifications for personal computer client systems must include the requirement for BIOS protections compliant with Section 3.1 of Reference (ds).

(20) In anticipation of emerging trusted platform module (TPM) product capabilities, as well as requirements for device identification, authentication, encryption, measurement, and device integrity, DoD Components will ensure new computer assets (e.g., server, desktop, laptop, thin client, tablet, smartphone, personal digital assistant, mobile phone) procured to support DoD will include a TPM version 1.2 or higher where required by DISA STIGs and where such technology is available.


(a) Vendor TPMs must be in conformance with Trusted Computing Group standards (www.trustedcomputinggroup.org/groups/tpm) and must be approved by the procuring DoD Component. The TPM must be turned on and ready for provisioning when the computer asset is received from the vendor. Written justification must be provided to the responsible AO if assets are procured without TPM technology in cases where it is available.

(b) DIRNSA will identify use cases and implementation standards and plans for DoD to leverage TPM functionality fully to enhance IT device security, including platform integrity verification (BIOS firmware and operating system software), platform identification and authentication, and enhanced encryption (hardware based key generation and certificate and key storage).

http://www.dtic.mil/whs/directives/corres/pdf/850001_2014.pdf