STMicroelectronics — ST33KTPM2X32DKJ1 TPM 2.0 Device for Consumer

Platform security in personal computers (PC), servers, network equipment, and connected endpoints increasingly relies on a hardware root of trust. The TPM can protect credentials, support measured boot, and provide evidence that a system remains in a known state. The ST33KTPM2X32DKJ1 is part of the STSAFE-TPM family and implements the Trusted Computing Group (TCG) TPM Library.

The ST33KTPM2X32DKJ1 targets compliance with Microsoft^® Windows^® 10 and 11, Linux^® drivers, and Intel^® vPro^® technology across supported deployment environments. It also complies with the TCG test suite for TPM 2.0 and the open-source TCG TPM 2.0 TSS implementations.

A fault-tolerant firmware loader helps keep the TPM functional if a firmware loading process is interrupted. The firmware image is signed with the elliptic curve digital signature algorithm (ECDSA) and post-quantum cryptography (PQC) Leighton-Micali signature (LMS), supporting a firmware-update mechanism designed for long-term security maintenance.

Also, it provides firmware and critical data self-recovery in line with NIST SP800-193 protection, detection, and recovery requirements. Security protections include an active shield, monitoring of environmental parameters, and hardware and software countermeasures against fault-injection and side-channel attacks. Cryptographic services cover key generation, signatures, encryption, hashing, message authentication, and random-number generation.