your Trusted Platform Module is ready for use as a smart card

The mostly smaller enterprises fear the investment into a large scale PKI smart card scheme – not even to think about all the readers, USB sticks or new keyboards that need to be invested in. But with the TPM they can securely store keys for pre-boot authentication, disk encryption and other security functions.

Companies have purchased Trusted Platform Module inbuilt on their computer motherboards with practically any of the computers in use today, but hardly make use of it. Originally designed for Digital Rights Management, applications tend to be expensive and not always worth to be invested in. And handling is quite difficult. But there are other ways to use the TPM – when using software designed to enable other security features of the client operating system. And saving loads of budget, too.

At the same time, wireless networks are more and more replacing LAN cables in standard office environments. And with the latest Windows operating system versions, the system administrators are able to configure those hotspots with the same security level typical of smart cards in their standard configuration.

charismathics CSSI TPM plug-in runs on

how charismathics CSSI facilitate security functions through TPM

With its TPM connector complementing its charismathics Smart Security Interface, charismathics enables the millions of TPM machines in the field to get out of their sleep mode and enhance the security of IT systems without an immediate requirement for an investment into smart cards and other hardware. WIFI hotspots can be secured appropriately, LAN infrastructure can be made redundant. And – most of all: all those certificates can be handled by standard directory services. There is no need for TPM specific applications to this extent. And enterprises are offered a migration path into a full PKI scheme with a first step.

what charismathics CSSI TPM plug-in is all about

At the core of the charismathics CSSI TPM solution is a version 1.2 compliant TCG Software Stack (TSS) that supports TPMs from all the major vendors, including Infineon, Atmel, STMicroelectronics and Broadcom. Application support is provided through a Microsoft CryptoAPI compliant CSP – for applications that support CryptoAPI, such as Microsoft Outlook - as well as a PKCS#11 component, for applications such as Firefox. These same interfaces can be used by card management applications to load keys and certificates onto the cards, and manage the user PIN. And this is valid for all the most common spread computer platforms.

charismathics CSSI TPM works seamlessly with charismathics CSSI for smart cards and USB tokens and supports all major card standards. It thus allows for a mixed environment where traditional PKI enabled computers through smart cards and tokens can work through the same CSSI platform with PKI upgraded TPM based computers. A single management utility – the charismathics Security Token Configurator – lets user and administrator manage all devices and credentials on those devices, all from a single interface.

charismathics CSSI TPM benefits and features

charismathics CSSI TPM plug-in

• makes the TPM available to applications that support smart cards and USB tokens
• uses the Trusted Platform Module already available on your enterprise class laptop or desktop
• eliminates the need to deploy smart cards and readers to end users
• supports all major TPM vendors including Infineon, Broadcom and Atmel
• supports a wide range of applications: remote logon, computer logon, digital signatures, email signing and encryption

The product includes:

• TCG Software Stack - TSS (ver. 1.2 compliant)
• Microsoft CryptoAPI Cryptographic Service Provider
• Microsoft Windows MInidriver
• PKCS#11
• Token Configurator Application