A Trusted Platform Module (TPM) is a chip which adds basic security features to a computer or a similar device. In some ways, the chip behaves like a permanently installed smartcard, but with the important difference that it is not restricted to a specific user, but to a device. It contains a unique cryptographic key and can thus be used to identify the computer.
A device with a TPM, specially costumized operating system and software together form a Trusted Computing Platform (TC platform). The advantage for users of such a system is protection against software manipulation by unauthorized third parties.
A TPM 2.0 can, but does not have to, be present as a separate physical chip on the mainboard. Some systems with TPM 2.0 use a so-called firmware TPM (fTPM 2.0). This refers to firmware that runs on a separate microcontroller core integrated in the processor, chipset or System-on-Chip.
Article in other languages: