\chapter{Conclusion and Outlook}
\label{cha:conclusion}
\section{Testing}
These are the test results

\section{Limitations}
Still hard to set up a system like that.
Documentation is available, but hardly any implementations for DAA and IMA.

\section{Future Work}
\subsection{Closing the chain of trust between TPM manufacturer and DAA issuer}
Activate a credential with to certify that the Membership key is in the Endorsement hierarchy, which can be verified with the TPM certificate.
\begin{itemize}
  \item Theoretical concept in the \emph{Practical Guide to TPM 2.0, pp 109 ff}
  \item Practical approach: with EK, AK and AIK to show validity of EK:\\ \url{https://ericchiang.github.io/post/tpm-keys/?utm_campaign=Go%20Full-Stack&utm_medium=email&utm_source=Revue%20newsletter#credential-activation}
\end{itemize}

\section{Outlook}
Hardening of the system beyond IMA useful.
Minimization also useful, because the logging gets shorter.

