ISO/IEC 11889-4:2009
Information technology — Trusted Platform Module — Part 4: Commands
ISO/IEC 11889 defines the Trusted Platform Module (TPM), a device that enables trust in computing platforms in general. ISO/IEC 11889-4:2009 defines the commands, actions of the commands, and the parameters to the commands that provide the TPM functionality.
| Get this standard | Prices exclude GST | |
|---|---|---|
| PDF ( Single user document) |
$5.00 NZD
|
|
| HardCopy |
$50.00 NZD
|
|
| Networkable PDF |
Price varies
|
Scope
Key words
Statement Type
Normative references
Abbreviated Terms
Admin Startup and State
TPM_Init
TPM_Startup
TPM_SaveState
Admin Testing
TPM_SelfTestFull
TPM_ContinueSelfTest
TPM_GetTestResult
Admin Opt-in
TPM_SetOwnerInstall
TPM_OwnerSetDisable
TPM_PhysicalEnable
TPM_PhysicalDisable
TPM_PhysicalSetDeactivated
TPM_SetTempDeactivated
TPM_SetOperatorAuth
Admin Ownership
TPM_TakeOwnership
TPM_OwnerClear
TPM_ForceClear
TPM_DisableOwnerClear
TPM_DisableForceClear
TSC_PhysicalPresence
TSC_ResetEstablishmentBit
The Capability Commands
TPM_GetCapability
TPM_SetCapability
TPM_GetCapabilityOwner
Auditing
Audit Generation
Effect of audit failing
TPM_GetAuditDigest
TPM_GetAuditDigestSigned
TPM_SetOrdinalAuditStatus
Administrative Functions - Management
TPM_FieldUpgrade
TPM_SetRedirection
TPM_ResetLockValue
Storage functions
TPM_Seal
TPM_Unseal
TPM_UnBind
TPM_CreateWrapKey
TPM_LoadKey2
TPM_GetPubKey
TPM_Sealx
Migration
TPM_CreateMigrationBlob
TPM_ConvertMigrationBlob
TPM_AuthorizeMigrationKey
TPM_MigrateKey
TPM_CMK_SetRestrictions
TPM_CMK_ApproveMA
TPM_CMK_CreateKey
TPM_CMK_CreateTicket
TPM_CMK_CreateBlob
TPM_CMK_ConvertMigration
Maintenance Functions (optional)
TPM_CreateMaintenanceArchive
TPM_LoadMaintenanceArchive
TPM_KillMaintenanceFeature
TPM_LoadManuMaintPub
TPM_ReadManuMaintPub
Cryptographic Functions
TPM_SHA1Start
TPM_SHA1Update
TPM_SHA1Complete
TPM_SHA1CompleteExtend
TPM_Sign
TPM_GetRandom
TPM_StirRandom
TPM_CertifyKey
TPM_CertifyKey2
Endorsement Key Handling
TPM_CreateEndorsementKeyPair
TPM_CreateRevocableEK
TPM_RevokeTrust
TPM_ReadPubek
TPM_OwnerReadInternalPub
Identity Creation and Activation
TPM_MakeIdentity
TPM_ActivateIdentity
Integrity Collection and Reporting
TPM_Extend
TPM_PCRRead
TPM_Quote
TPM_PCR_Reset
TPM_Quote2
Changing AuthData
TPM_ChangeAuth
TPM_ChangeAuthOwner
Authorization Sessions
TPM_OIAP
Actions to validate an OIAP session
TPM_OSAP
Actions to validate an OSAP session
TPM_DSAP
TPM_SetOwnerPointer
Delegation Commands
TPM_Delegate_Manage
TPM_Delegate_CreateKeyDelegation
TPM_Delegate_CreateOwnerDelegation
TPM_Delegate_LoadOwnerDelegation
TPM_Delegate_ReadTable
TPM_Delegate_UpdateVerification
TPM_Delegate_VerifyDelegation
Non-volatile Storage
TPM_NV_DefineSpace
TPM_NV_WriteValue
TPM_NV_WriteValueAuth
TPM_NV_ReadValue
TPM_NV_ReadValueAuth
Session Management
TPM_KeyControlOwner
TPM_SaveContext
TPM_LoadContext
Eviction
TPM_FlushSpecific
Timing Ticks
TPM_GetTicks
TPM_TickStampBlob
Transport Sessions
TPM_EstablishTransport
TPM_ExecuteTransport
TPM_ReleaseTransportSigned
Monotonic Counter
TPM_CreateCounter
TPM_IncrementCounter
TPM_ReadCounter
TPM_ReleaseCounter
TPM_ReleaseCounterOwner
DAA commands
TPM_DAA_Join
TPM_DAA_Sign
Deprecated commands
Key commands
TPM_EvictKey
TPM_Terminate_Handle
Context management
TPM_SaveKeyContext
TPM_LoadKeyContext
TPM_SaveAuthContext
TPM_LoadAuthContext
DIR commands
TPM_DirWriteAuth
TPM_DirRead
Change Auth
TPM_ChangeAuthAsymStart
TPM_ChangeAuthAsymFinish
TPM_Reset
TPM_OwnerReadPubek
TPM_DisablePubekRead
TPM_LoadKey
Deleted Commands
TPM_GetCapabilitySigned
TPM_GetOrdinalAuditStatus
TPM_CertifySelfTest
Bibliography
Keep me up-to-date
Sign up to receive updates when there are changes to this standard
Related Information
Similar Standards
-
AS/NZS ISO/IEC 27001:2023
Information security, cybersecurity and privacy protection – Information security management systems – Requirements
-
AS/NZS ISO/IEC 27001:2023 A1
Information security, cybersecurity and privacy protection - Privacy enhancing data de-identification framework
-
AS/NZS ISO/IEC 27002:2022
Information security, cybersecurity and privacy protection — Information security controls
-
AS/NZS ISO/IEC 27035.1:2025
Information technology – Information security incident management – Part 1: Principles and process
Scope
Key words
Statement Type
Normative references
Abbreviated Terms
Admin Startup and State
TPM_Init
TPM_Startup
TPM_SaveState
Admin Testing
TPM_SelfTestFull
TPM_ContinueSelfTest
TPM_GetTestResult
Admin Opt-in
TPM_SetOwnerInstall
TPM_OwnerSetDisable
TPM_PhysicalEnable
TPM_PhysicalDisable
TPM_PhysicalSetDeactivated
TPM_SetTempDeactivated
TPM_SetOperatorAuth
Admin Ownership
TPM_TakeOwnership
TPM_OwnerClear
TPM_ForceClear
TPM_DisableOwnerClear
TPM_DisableForceClear
TSC_PhysicalPresence
TSC_ResetEstablishmentBit
The Capability Commands
TPM_GetCapability
TPM_SetCapability
TPM_GetCapabilityOwner
Auditing
Audit Generation
Effect of audit failing
TPM_GetAuditDigest
TPM_GetAuditDigestSigned
TPM_SetOrdinalAuditStatus
Administrative Functions - Management
TPM_FieldUpgrade
TPM_SetRedirection
TPM_ResetLockValue
Storage functions
TPM_Seal
TPM_Unseal
TPM_UnBind
TPM_CreateWrapKey
TPM_LoadKey2
TPM_GetPubKey
TPM_Sealx
Migration
TPM_CreateMigrationBlob
TPM_ConvertMigrationBlob
TPM_AuthorizeMigrationKey
TPM_MigrateKey
TPM_CMK_SetRestrictions
TPM_CMK_ApproveMA
TPM_CMK_CreateKey
TPM_CMK_CreateTicket
TPM_CMK_CreateBlob
TPM_CMK_ConvertMigration
Maintenance Functions (optional)
TPM_CreateMaintenanceArchive
TPM_LoadMaintenanceArchive
TPM_KillMaintenanceFeature
TPM_LoadManuMaintPub
TPM_ReadManuMaintPub
Cryptographic Functions
TPM_SHA1Start
TPM_SHA1Update
TPM_SHA1Complete
TPM_SHA1CompleteExtend
TPM_Sign
TPM_GetRandom
TPM_StirRandom
TPM_CertifyKey
TPM_CertifyKey2
Endorsement Key Handling
TPM_CreateEndorsementKeyPair
TPM_CreateRevocableEK
TPM_RevokeTrust
TPM_ReadPubek
TPM_OwnerReadInternalPub
Identity Creation and Activation
TPM_MakeIdentity
TPM_ActivateIdentity
Integrity Collection and Reporting
TPM_Extend
TPM_PCRRead
TPM_Quote
TPM_PCR_Reset
TPM_Quote2
Changing AuthData
TPM_ChangeAuth
TPM_ChangeAuthOwner
Authorization Sessions
TPM_OIAP
Actions to validate an OIAP session
TPM_OSAP
Actions to validate an OSAP session
TPM_DSAP
TPM_SetOwnerPointer
Delegation Commands
TPM_Delegate_Manage
TPM_Delegate_CreateKeyDelegation
TPM_Delegate_CreateOwnerDelegation
TPM_Delegate_LoadOwnerDelegation
TPM_Delegate_ReadTable
TPM_Delegate_UpdateVerification
TPM_Delegate_VerifyDelegation
Non-volatile Storage
TPM_NV_DefineSpace
TPM_NV_WriteValue
TPM_NV_WriteValueAuth
TPM_NV_ReadValue
TPM_NV_ReadValueAuth
Session Management
TPM_KeyControlOwner
TPM_SaveContext
TPM_LoadContext
Eviction
TPM_FlushSpecific
Timing Ticks
TPM_GetTicks
TPM_TickStampBlob
Transport Sessions
TPM_EstablishTransport
TPM_ExecuteTransport
TPM_ReleaseTransportSigned
Monotonic Counter
TPM_CreateCounter
TPM_IncrementCounter
TPM_ReadCounter
TPM_ReleaseCounter
TPM_ReleaseCounterOwner
DAA commands
TPM_DAA_Join
TPM_DAA_Sign
Deprecated commands
Key commands
TPM_EvictKey
TPM_Terminate_Handle
Context management
TPM_SaveKeyContext
TPM_LoadKeyContext
TPM_SaveAuthContext
TPM_LoadAuthContext
DIR commands
TPM_DirWriteAuth
TPM_DirRead
Change Auth
TPM_ChangeAuthAsymStart
TPM_ChangeAuthAsymFinish
TPM_Reset
TPM_OwnerReadPubek
TPM_DisablePubekRead
TPM_LoadKey
Deleted Commands
TPM_GetCapabilitySigned
TPM_GetOrdinalAuditStatus
TPM_CertifySelfTest
Bibliography