Method to Secure NVMe SSD Out-Of-Band interface via SPDM

Presented by Karthik Balan (Samsung)

Exponential spike in data and distributed storage infrastructure has set a high importance for Integrity of Components in Enterprise and Data Center eco-system. Any compromise on integrity would result is breach of data in flight/rest at storage media.

SPDM (Security Protocol & Data Model) defines messages, data object and sequence for performing message exchange between two (or more) components. SPDM’s key features are Authentication and Attestation. In Data Center deployments, component’s SPDM support is mandated by OEM/ODM and Specification for better Secure interface.

This session will talk about problem faced to secure the Management Interface transaction with NVMe SSD and how SPDM features are enabling secure data exchanges. Talk will give an insight on how device authentication & measurement of firmware and certificate takes place.

Conclude with how NVMe SSD Out-of-Band communication is secured via SPDM over MCTP binding for both SMBUS, PCI VDM paths, insights on future plans.