Infineon/pkcs11-optiga-tpm

OPTIGA™ TPM-Based PKCS #11 Token Setup and User Guide

Introduction

This document explains how an OPTIGA™ TPM SLx 967x TPM2.0 can be integrated into a Raspberry Pi® to create a TPM-based PKCS #11 cryptographic token.

PKCS #11 is a Public-Key Cryptography Standard that defines a standard platform-independent API to access cryptographic services from tokens, such as hardware security modules (HSM) and smart cards. This document provides guidance on how to setup a TPM-based token on a Raspberry Pi®.

The document contains the guide to utilize either esysdb (SQLite) or FAPI as PKCS #11 backend.

Prerequisites

Hardware prerequisites:

• Raspberry Pi® 4
• Use either of the following TPM2.0 boards:
  • IRIDIUM9670 TPM2.0
    
  • OPTIGA™ TPM SLB 9672 RPI evaluation board
    

Getting Started

For detailed setup and information, please find the Application Note at link.

License

This project is licensed under the MIT License - see the LICENSE file for details.