Implementations described herein disclose a device identity management system using a trusted platform module (TPM) of a device. The device identity management system provides one or more computer executable instructions to receive a secret random number at a trusted platform module (TPM) of a device, generate a hash of an existing device identity stored in a non-volatile (NV) identity index using the secret random number, and store the hash as the device identity in the NV identity index.