TCG Defines Requirements for PQC-Ready Trusted Platform Modules

Insider Brief

• The Trusted Computing Group (TCG) has issued guidance defining requirements for determining whether Trusted Platform Modules (TPMs) are ready for post-quantum cryptography.
• The guidance identifies TCG PC Client Platform TPM Profile (PTP) 1.07 as the baseline for a PQC-ready TPM and defines separate “PQC-ready” and “PQC-upgradable” designations.
• TCG also plans to expand its certification programs to certify TPMs that meet the PTP 1.07 requirements.

Press release – Businesses have been provided a clear benchmark for judging whether electronic device vendors’ claims of protection against quantum enabled attacks are valid, through new guidance released today from the Trusted Computing Group.

TCG’s requirements for Trusted Platform Modules (TPMs) enables companies to request clear evidence from vendors that their products genuinely meet essential Post Quantum Cryptography (PQC) requirements and avoid TPMs that advertise ‘compliance’ yet fail to provide full, end-to-end security capabilities.

“It’s important that organizations gain a full understanding of what a PQC-ready TPM is,” said TCG President Joe Pennisi. “As PQC capabilities emerge, businesses will need to look beyond individual algorithm support and understand the broader requirements for quantum-safe identities, attestation, and hardware-anchored trust.”