I'm learning about and researching the Trusted Platform Module (TPM) to incorporate into a solution involving remote machines.
As I understand it: all attestation methods (AIK, DAA) still require someone to know your identity (well, the chip's identity) and issue a certificate based on this identity. The anonymity only works because the CA is trusted not to reveal your identity in the process. Your identity is only safe from the verifier.
In this case, who is the CA? The manufacturer? And if so, is it the motherboard or chipset manufacturer (e.g. ASUS (mb) or Intel (chipset) or Winbond (IC)?).
Also, how would one contact these CA's? Do they have public facing interfaces? What do I send them?
In short, how do I start using remote attestation right now, with respect to CA authority? How do I contact them and who are they exactly?