'Securing firmware: Secure and Trusted boot in OpenBMC' - Joel Stanley (LCA 2020)

Joel Stanley

The OpenBMC project has brought modern Linux technologies to the firmware in your new server. A missing piece of this is ensuring the firmware is the image you expect it to be running, weather that is something your vendor shipped, an update, or something you build yourself from the open source project.

The next generation of BMC hardware will allow a hardware root of trust to secure the entire boot chain. Come hear about how that works, and how the design goes to great lengths to ensure user freedoms to replace firmware while still being secure are preserved. This talk will coverTPMs, EEPROMs, keys, and signing, from a firmware perspective.

Fri Jan 17 11:40:00 2020 at Room 7