endorsement key

The endorsement key is a 2048-bit RSA public and private key pair, which is created randomly on the chip at manufacture time and cannot be changed.

"Binding" encrypts data using the TPM endorsement key, a unique RSA key burned into the chip during its production, or another trusted key descended from it.

Privacy concerns with the TCG revolve around the fact that each TPM has a unique keypair, called the "endorsement key", that identifies the platform.

Each TPM has an embedded RSA key pair called an Endorsement Key (EK) which the privacy CA is assumed to know.