TCG Component RIM

A Component Reference Integrity Manifest¹, or Component RIM, as defined by the Trusted Computing Group (TCG) is similar in concept to a PC Client RIM, but is designed for hardware components of a platform (such as graphics adapters, microprocessors, etc.).

Details

The TCG Component RIM Binding specification² defines two formats/encoding for Component RIMs: SWID (XML) and CoSWID (CBOR). The attributes defined in the binding specification closely mimic those defined by the TCG PC Client RIM specification.

It also provides extensions which support attestation of the DMTF's Security Protocols and Data Model (SPDM) specification³.

It is further envisioned that this specification can support devices adhering to the TCG DICE⁴ set of specifications which support devices that do not contain a Trusted Platform Module (TPM). DICE also contains definitions for CoRIMs, so ether format may present in the future.

---

1. See the TCG Component Reference Integrity Manifest Information Model specification here . ↩

2. See the TCG Component RIM Binding (for SWID/CoSWID) specification here . ↩

3. See details about SPDM here . ↩

4. See details about TCG DICE here . ↩