Tpm 2.0 platform hierarchy authentication after uefi post

A program product for authenticating a command for configuring a trusted platform module in a computing device comprising a computer readable storage medium that stores code executable by a processor, the executable code comprising code to perform:

• generating a request for configuring the trusted platform module;
• obtaining a digital signature, the digital signature generated using the command;
• and
• causing the digital signature to be verified thereby authenticating the command for execution by the trusted platform module in response to successful verification.

A computing device comprising:

• a trusted platform module;
• a processor;
• a memory component configured to store a platform authorization key for permitting access to the trusted platform module;
• and
• a data storage device, the data storage device storing non-transitory instructions operative by the processor to:
• store the platform authorization key in the memory component;
• obtain a digital signature in response to the computing device requesting access to the trusted platform module, the digital signature generated using at least a command for configuring the trusted platform module;
• verify the digital signature;
• and
• allow retrieval of the platform authorization key from the memory of the computing device in order to access the trusted platform module in response to the digital signature being verified, and to deny retrieval of the platform authorization key otherwise.