TPM: Advanced anti-malware protection using TPM-based certificates

Supported devices use Trusted Platform Module based (TPM-based) certificates for advanced anti-malware (AAMW) protection. To use the TPM-based certificates:

• The firewall loads the certificate using PKI during the device's start and restart operation. To view the certificate ID, referred as idev-id, use the show security pki node-local local-certificate certificate-id idev-id command.
• The SSL Initiation uses the certificate for Transport Layer Security (TLS) connection to authenticate the device. You can configure the tpm option using the set services ssl initiation profile profile-name crypto-hardware-offload command.