https://www.dmtf.org/standards/pmci
The Security Protocol and Data Model (SPDM) Specification (DSP0274) provides message exchange, sequence diagrams, message formats, and other relevant semantics for authentication, firmware measurement, and certificate management. This specification for additional security defined by SPDM has a goal of aligning component authentication and integrity objects across the industry and is being designed to be referenced by other standards organizations.
The SPDM over MCTP Binding Specification (DSP0275) will contain the mapping of SPDM to MCTP message type 5 for usage within a Platform Management Subsystem that uses DMTF’s Management Component Transport Protocol (MCTP) for communication between individual components.