From mboxrd@z Thu Jan 1 00:00:00 1970 From: Ross Philipson Subject: Re: Trusted Boot with Xen 4.x Date: Thu, 26 Sep 2013 09:49:35 -0400 Message-ID: <52443B6F.8090506@citrix.com> References: Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; Format="flowed" Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: xen-devel-bounces@lists.xen.org Errors-To: xen-devel-bounces@lists.xen.org To: "xen-devel@lists.xensource.com" Cc: Srujan Kotikela List-Id: xen-devel@lists.xenproject.org On 09/25/2013 03:43 PM, Srujan Kotikela wrote: > Hi, > > Can anyone point me to a resource to achieve trusted boot (tboot) of Xen > 4.x using Intel TXT/TPM? You probably want to start with the tboot project at sourceforge: http://sourceforge.net/projects/tboot/ There are some docs in the repo that discuss how to setup you launch policies and work with the TPM. You will need to find the correct SINIT module for you chipset. There is a file called SINIT-README at the above site that gives you information about that part. If you build/install the code or install a package, you will end up with tboot.gz as your multiboot module in grub and a number of tools you will need to configure your system. Also google tboot and trusted boot, you will get some good hits. Ross > > ~ Srujan > > > _______________________________________________ > Xen-devel mailing list > Xen-devel@lists.xen.org > http://lists.xen.org/xen-devel >