"Lan Wong, HP's firmware architect in the personal systems group, also spoke at the NSA Trusted Computing Conference on the topic of TPM and key protection and device authentication.
TPM "uses the system BIOS as the root of trust to enable remote authentication," she said. HP, as a founding member of the Trusted Computing Group, has been shipping TPM in HP desktops and notebooks since 2003. But she acknowledges that customers have either ignored TPM too often or not always found it easy to use. She also alluded to the lack of a standard for remote deployment of TPM activations.
The TPM control interface require specialized knowledge, she said, and TPM activation and enablement isn't as simple as it could probably be. But HP's implementation comes with scripts the IT administrators can use to activate TPM deployments in their enterprise.
She also noted it's possible to use TPM to enhance file and folder encryption by tying encryption to TPM. Wong hinted that HP will soon have announcements related to what is being called the "trusted public cloud," but she declined to be into detail.
In acquiring ArcSight, HP signals intent to be the security leader as NSA accreditations lag behind IT security innovations.