A systems engineer is hardening enterprise endpoints, embedded controllers, and server infrastructure. Match each hardware security feature on the left with its primary operational function on the right.
- Trusted Platform Module (TPM)Provides endpoint boot integrity measurement and securely stores cryptographic keys on host systems.
- Hardware Security Module (HSM)Accelerates enterprise cryptographic operations and manages keys centrally in high-volume server environments.
- Physically Unclonable Function (PUF)Derives a unique device key based on microscopic silicon manufacturing variations.
- eFusePermanently restricts hardware capabilities or locks boot configurations via physical one-time programmable blown traces.
Answer
Trusted Platform Module (TPM) pairs with local endpoint integrity measurements and host key storage. Hardware Security Module (HSM) pairs with centralized high-volume cryptographic processing. Physically Unclonable Function (PUF) pairs with deriving unique device keys from silicon manufacturing variations. eFuse pairs with permanently locking hardware configurations via one-time programmable physical blown traces.
Each hardware security feature corresponds strictly to its targeted operational profile: TPM provides endpoint host boot measurement; HSM handles centralized server cryptographic acceleration; PUF generates unique chip keys based on physical silicon variations; and eFuse permanently alters chip capabilities by burning physical internal fuses.
Step-by-Step Solution
Key Concept
Hardware-based security controls and roots of trust