DMTF announces the public release of its new Security Protocol and Data Model (SPDM) Specification, as well as the SPDM over MCTP Binding Specification, as Works in Progress (WIP). These specifications – developed by DMTF’s Platform Management Components Intercommunication (PMCI) Security Task Force – incorporate the input of the organization’s Alliance Partners to help align component authentication and integrity objects across the industry.

The SPDM Specification provides message exchange, sequence diagrams, message formats, and other relevant semantics for authentication, firmware measurement, and certificate retrieval. The SPDM over MCTP Binding Specification contains the mapping of SPDM to MCTP message type 5, for usage within a platform management subsystem that uses DMTF’s Management Component Transport Protocol (MCTP) for communication between individual components.

Designed to be referenced by other standards organizations and developers, DMTF invites public comment on the SPDM WIP specifications before they are finalized. Feedback may be submitted on our website at https://www.dmtf.org/standards/feedback/.