Thanks. I will check it out.
Fyi. I found a couple references at scaprepo.com tracing to Windows 2012.
Eg. Oval:org.secpod.oval:def:38125. / cce-37631-9
However at first glance they did not appear to be very granular.
aside: l envisioned the following 'wag' acceptance strawman:
- dumping the state of (significant/ published/ relevant) TPM registerŭs.
- Dumping the state of any TPM relevant config items eŭlements such as BOOT/init/OS/app/data/master-data .
- Validating the dumped elements against TPM spec(s).
- 'optionally', computing specific statistics by validating the dumped elements against published errata.
From: Trevor Vaughan
Sent: Wednesday, July 27, 2016 19:00
To: SCAP Security Guide
Reply To: SCAP Security Guide
Subject: Re: TPM posture inquiry
We will be providing a set of custom Facter facts to gather this information and report it back for automated configuration.