What is a TPM and what is its role in a TA environment?

• A. A software component that manages user credentials.
• B. A hardware root of trust storing keys and measurements.
• C. A cloud service for remote attestation.
• D. A network protocol for secure channels.

Answer: (B)

A TPM is a hardware root of trust embedded in the platform. It securely stores cryptographic keys and the measurements (hashes) of software and firmware that have loaded during the boot process. This hardware-based security means keys and those measurements are protected from tampering even if the operating system is compromised.

In a Trusted Agent environment, the TPM enables trusted boot and attestation. The platform can seal data or perform cryptographic operations using keys that are bound to a specific, measured state. When a remote verifier asks for proof of integrity, the TPM can sign or quote the current measurements (PCR values) with a key, demonstrating the exact state of the system. This trusted hardware foundation is what makes attestation trustworthy.

The other options don’t fit because a TPM is not simply software that manages credentials, nor is it a cloud service for remote attestation, nor a network protocol for secure channels. It’s the hardware root of trust that stores keys and measurements and supports secure attestation and protection of sensitive material.