PQC Starts at the Root of Trust: The Role of TPMs in Protecting Next-Generation Device Identities

As organizations prepare for the transition to post-quantum cryptography, much of the conversation focuses on algorithms, certificates, and PKI infrastructure. Yet the success of any migration ultimately depends on where cryptographic keys are generated, stored, and protected. For billions of enterprise and IoT devices, that foundation is the Trusted Platform Module (TPM).

This session explores the role of TPMs as the hardware root of trust enabling post-quantum migration for device identities and machine credentials. From certificate enrollment and key attestation to secure storage and cryptographic agility, TPMs provide the security foundation that allows PKI ecosystems to evolve without compromising trust.

We will examine the practical challenges PKI teams face when introducing post-quantum algorithms into existing deployments (including the hardware refresh cycle) and describe how TPM capabilities can support the transition while maintaining compatibility with existing enterprise and IoT infrastructures.

Attendees will gain a clearer understanding of how hardware-backed key protection intersects with PQC deployment, why device identity should be part of every migration roadmap, and what steps organizations can take today to prepare for a quantum-resilient future.