awk, hard to say where this might lead. I envision this as a way to standardize the management tools for an enterprise that is on a TPM implementation journey. From a trusted infrastructure perspective you are right on ... virtualization is a good thing.
I question whether a virtual TPM would secure a client as robustly as hardware TPM. In any event, it would be interesting to see how the Wave IP might apply to virtual TPM's. Not my area, but I would expect a lot of the client software processes and routines to be virtually the same.
Comprehensive write-up about the history and technology of virtualization...and, ultimately, I believe Intel's virtualization (VT) and LaGrande (LT) technology is the reason for Apple to switch to Intel processors....
And this snippet:
"...The newest Sun reincarnation of these concepts is (tentatively) called "Zones": a feature in the upcoming Solaris 10. According to Sun, the concept is derived from the BSD "jail" concept: a Zone (also known as a "trusted container") is an isolated and secure execution environment that appears as a "real machine" to applications. There is only one copy of the Solaris kernel..."