Sourcetxx

TrustedComputePoolswithIntelTrustedExecutionTechnology(IntelTXT)HOSTSENSITIVEWORKLOADSONTRUSTEDSERVERSINMULTI-TENANTENVIRONMENTSIntelTXTwithTrustedBootbringsserversupintoatrustedlaunchconfigurationoMeasuredlaunchenvironment(MLE)isstoredinaTrustedPlatformModule(TPM)duringserversetupoThetrustedbootprocesscomparestheactuallaunchmeasurementwiththestoredwhitelistIntelTXTwithTrustedBoot(Tboot)TrustedComputePoolsPlaceworkloads&VMsintrustedpoolsofvirtualizedserversSolutionstackrequirements–PolicyEngine/ConsoletoManage,CPUthatinitiatesatrustedboot,TCGCompliantTrustedPlatformModule(TPM)Coretechnologies–IntelXeonprocessor,IntelTXT,IntelVirtualizationTechnologyFlexMigration1Source:McCann:"What'sholdingthecloudback"-CloudsecurityglobalITsurvey,sponsoredbyIntel,May2012OpenStack*withTrustedComputePoolsOpenAttestation(OAT)softwareverifiesservertruststatusandbuildsatrustedcomputepoolfortheschedulerTheOpenStack*schedulerplacesworkloadsandVMsintothetrustedserversTrustedComputePoolswithGeo-TaggingTargetingaFutureReleaseofOpenStackUseassetlocationdescriptorinformationtocontrolvirtualworkloadplacementOpenStackenhancements:Dashboard–displayVM/storagegeoFlavor–VMInstanceandStoragegeoAggregatefilterEnhanceattestationserviceContactattestationserverforgeo-attestationProvisionwithgeocertificatefortrustedmachinesLinksformoreinformation:IntelTXT:http://www.
intel.
com/txtOpenStackProject:http://www.
openstack.
orgOpenAttestationProject:https://01.
org/openattestationWhitePapersandGuides:http://www.
intel.
com/cloudIntel,Xeon,andtheIntellogoaretrademarksofIntelCorporationintheUnitedStatesandothercountries.
IntelTrustedExecutionTechnology(IntelTXT):Nocomputersystemcanprovideabsolutesecurityunderallconditions.
IntelTXTrequiresacomputerwithIntelVirtualizationTechnology,anIntelTXTenabledprocessor,chipset,BIOS,AuthenticatedCodeModulesandanIntelTXTcompatiblemeasuredlaunchedenvironment(MLE).
IntelTXTalsorequiresthesystemtocontainaTPMv1.
s.
Formoreinformation,visithttp://www.
intel.
com/technology/security.
TrustedPlatformModule(TPM):TheoriginalequipmentmanufacturermustprovideTPMfunctionality,whichrequiresaTPM-supportedBIOS.
TPMfunctionalitymustbeinitializedandmaynotbeavailableinallcountries.
IntelVirtualizationTechnology(IntelVT)requiresacomputersystemwithanenabledIntelprocessor,BIOS,andvirtualmachinemonitor(VMM).
Functionality,performanceorotherbenefitswillvarydependingonhardwareandsoftwareconfigurations.
Softwareapplicationsmaynotbecompatiblewithalloperatingsystems.
ConsultyourPCmanufacturer.
Formoreinformation,visithttp://www.
intel.
com/go/virtualization.
*Othernamesandbrandsmaybeclaimedasthepropertyofothers.
Copyright2014IntelCorporation.