I am dealing with the TPM right now and do not get why there is a need for an extra signing key. Instead one could use one of the AIKs for signing as well?! Using different keys shall be good practice but I would like to get a more detailed view on that issue.

Thanks in advance!

onb