2021 OCP Global Summit: DICE based NIC attestation

preview_player
Показать описание
The introduction of attestation-protocol requires secured-devices to be able to prove their identity and data-integrity in a secured non-cloneable way. ConnectX-7 devices embed HW RoT which, combined with production-time provisioning of device certificate, device-unique asymmetric key-pair and ROM code, allows to address secure-boot, secure FW update and DICE based attestation, while allowing full recoverability and upgradability for any deployed HW.

In this talk I will cover the attestation flow, which includes the reported attestation measurements, certificate-chain and the process of preventing device-cloning. The attestation flow uses SPDM protocol and addresses the TCG DICE specification.
Рекомендации по теме
Комментарии
Автор

where is the private key associated with the certs stored?

pranavkirtani