Information on ST's TPM firmware update – ECDSA signature generation

Trusted Platform Module (TPM) Firmware updates, including additional countermeasures in the implementation of the Elliptic Digital Signature Algorithm (ECDSA) signature generation function, are available for ST’s devices based on Trusted Computing Group specifications 2.0. TPM devices based on TCG specifications 1.2 do not support this cryptographic function.

The deployment of a TPM firmware update is not required if:

• the ecosystem does not depend on this cryptographic service or

• the platform already provides countermeasures

Please follow this link for more information on the impact on Microsoft Windows operating systems devices.

For end-users of computing devices with an ST TPM

• Lenovo support : click here
• Dell support : click here
• Panasonic support : click here
• HPE support : click here

For other operating systems or embedded devices, please contact your device manufacturer.

The TPM-affected products' firmware and applicable firmware updates are listed below: 

The TPM products and firmware not listed are not affected.

CVE Identifier: CVE-2019-16863. 

Further information