Originally posted by: stash
TPM doesn't have anything to do with smartcards. A TPM essentially is a smartcard soldered directly to the motherboard.
Smartcards are used for two-factor authN, as noted above, but they are not limited to this. They store cryptographic keys that can be used for authentication, non-repudiation or encryption.
One major initiative around smartcards today is Homeland Security Presidential Directive 12 (HSPD-12), which was an order signed by President Bush mandating that all Federal agencies use a authentication and authorization method for both logical and physical access.
http://www.whitehouse.gov/news/releases/2004/08/20040827-8.html
This led to FIPS-201, which is basically an interpretation of HSPD-12 by NIST. It goes into very technical detail about how the directive should be carried out, and it specifies the use of smartcards. If there are any military people out there, HSPD-12 is similar to the CAC program that DoD has been using for awhile now.
I've been working on this project for almost two years with my customer, and this Friday is the deadline for agencies to begin issuing cards. Should be a busy week.
edit: wow the language filters on this forum are retarded. c.s.r.c is not a bad word folks.