Valid

GB/T 36639-2018Information security technology—Trusted computing specification—Trusted support platform for server (English PDF)

信息安全技术可信计算规范服务器可信支撑平台

Preview PDF

This is a limited preview

Buy now to download the full PDF (15 pages)

Need quotation for your management?

Get a formal quotation for GB/T 36639-2018 in 30 minutes.

Issued by

SAMR; SAC

Level / Type

National · Recommended

Issue date

September 17, 2018

Implementation date

April 1, 2019

Scope

GB/T 36639-2018 is the English-translated version of 信息安全技术可信计算规范服务器可信支撑平台.

GB/T 36639-2018 sets the functional and security requirements for the trusted support platform of a server, the system built on the server hardware, or on hardware and operating system together, that supports trusted computing functions.

It describes the platform's composition and its relationship with the server hardware and operating system, then gives general requirements for physical and virtual roots of trust, trusted base components, integrity measurement, storage and reporting, and cryptographic algorithms.

Further clauses cover the trust chain and measurement in the server hardware, the virtual trusted components and the trusted migration of a virtual root of trust, with server timing control in a normative annex.

It applies to the design, production, integration, management and testing of such platforms in trusted computing systems. It was issued on 17 September 2018 and has applied since 1 April 2019.

Found what you need?

Document preview — GB/T 36639-2018

National Standard of the People's Republic of China

ICS: 35.040
Classification: L 80

Issued by: State Administration for Market Regulation; Standardization Administration of the PRC

Foreword
1 Scope
2 Normative references
3 Terms and definitions, abbreviations
4 Composition
4.1 Server Trusted Support Platform Composition
4.2 Relationship between server trusted support platform and server hardware system
4.3 Relationship between server trusted support platform and server operating system
5 General requirements
5.1 Overview
5.2 Physical Trusted Roots
5.3 Virtual Trusted Root
5.4 Trusted Foundation Components
5.5 Integrity Measurement, Storage and Reporting
5.6 Password Algorithm
6 server hardware system trusted function requirements
6.1 Trust Chain Establishment Process
6.2 Measurement Requirements
7 Virtual Trusted Components
7.1 Requirements for server hardware systems
7.2 Virtual Trusted Root
7.3 Virtual Trusted Root Manager
7.4 Trusted Migration
7.5 Remote proof
8 Virtual Trusted Root Trusted Migration
8.1 Overview
8.2 Trusted Migration Process
Appendix A (Normative) Server Timing Control
A.1 Overview
A.2 Server Board Power-on Timing
A.3 Server Board Reset Timing
A.4 Server OMM Reset Timing
Appendix B (informative) Virtual Trusted Metric Roots
Reference

Foreword

This standard was drafted in accordance with the rules given in GB/T 1.1-2009.

1 Scope

This standard specifies the functional and security requirements of the server trusted support platform, and describes the composition of the server trusted support platform. structure.

This standard applies to the design, production, integration, management and testing of server trusted support platforms under trusted computing systems.

2 Normative references

The following documents are indispensable for the application of this document. For dated references, only dated versions apply to this document. For undated references, the latest edition (including all amendments) applies to this document.

GB/T 29827-2013 Information Security Technology Trusted Computing Specification Trusted Platform Motherboard Function Interface

GB/T 29829-2013 Information Security Technology Trusted Computing Cryptographic Support Platform Function and Interface Specification

3 Terms and definitions, abbreviations

3.1 Terms and definitions

The following terms and definitions as defined in GB/T 29827-2013 and GB/T 29829-2013 apply to this document.

3.1.1 Server trusted support platform

Built in a combination of server hardware systems or server hardware systems and operating systems to support trusted computing functions system.

Note: In a virtualized environment, the virtual machine monitor should also be included in the operating system.

3.1.2 Physical trusted root

A module for providing integrity metrics, secure storage, trusted reporting, and password services for the server's trusted support platform. Often composed of hardware or hardware and firmware.

3.1.3 Virtual trusted root

A component in the server trusted support platform that provides virtual machines with physical trust root functional requirements and migration characteristics.

3.1.4 Virtual trusted component

A collection of all programs and data in the operating system that provide trusted functions for virtual machines, including virtual trusted roots, virtual trusted roots Processors and trusted migration components.

3.1.5 Trusted base component

Software module for accessing and managing physical trusted root capabilities for virtual trusted components and external entities of the server trusted support platform Collectively.

Note: For example, TCM service module, etc.

......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 15 pages — is available in the English PDF.

Referenced standards

Normative references

Cited by

Similar standards

GB/T 18805-2026|GB/T 32915-2026|GB/T 42382.2-2026|GB/T 42382.3-2026|GB/T 47277-2026|GB/T 47312-2026

How to Download GB/T 36639-2018

1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.