Trusted Boot with Xen 4.x

Trusted Boot with Xen 4.x

[Srujan Kotikela]

[-- Attachment #1.1: Type: text/plain, Size: 113 bytes --]

Hi,

Can anyone point me to a resource to achieve trusted boot (tboot) of Xen
4.x using Intel TXT/TPM?

~ Srujan

[-- Attachment #1.2: Type: text/html, Size: 199 bytes --]

[-- Attachment #2: Type: text/plain, Size: 126 bytes --]

_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xen.org
http://lists.xen.org/xen-devel

Re: Trusted Boot with Xen 4.x

[Ross Philipson]

On 09/25/2013 03:43 PM, Srujan Kotikela wrote:
> Hi,
>
> Can anyone point me to a resource to achieve trusted boot (tboot) of Xen
> 4.x using Intel TXT/TPM?

You probably want to start with the tboot project at sourceforge:

http://sourceforge.net/projects/tboot/

There are some docs in the repo that discuss how to setup you launch 
policies and work with the TPM. You will need to find the correct SINIT 
module for you chipset. There is a file called SINIT-README at the above 
site that gives you information about that part.

If you build/install the code or install a package, you will end up with 
tboot.gz as your multiboot module in grub and a number of tools you will 
need to configure your system. Also google tboot and trusted boot, you 
will get some good hits.


Ross

>
> ~ Srujan
>
>
> _______________________________________________
> Xen-devel mailing list
> Xen-devel@lists.xen.org
> http://lists.xen.org/xen-devel
>

Re: Trusted Boot with Xen 4.x

[Ross Philipson]

On 09/26/2013 09:49 AM, Ross Philipson wrote:
> On 09/25/2013 03:43 PM, Srujan Kotikela wrote:
>> Hi,
>>
>> Can anyone point me to a resource to achieve trusted boot (tboot) of Xen
>> 4.x using Intel TXT/TPM?
>
> You probably want to start with the tboot project at sourceforge:
>
> http://sourceforge.net/projects/tboot/
>
> There are some docs in the repo that discuss how to setup you launch
> policies and work with the TPM. You will need to find the correct SINIT
> module for you chipset. There is a file called SINIT-README at the above
> site that gives you information about that part.
>
> If you build/install the code or install a package, you will end up with
> tboot.gz as your multiboot module in grub and a number of tools you will
> need to configure your system. Also google tboot and trusted boot, you
> will get some good hits.

Oh sorry I forgot to add - there is a tboot-devel mailing list too - 
probably best for tboot questions to be posted there.

>
>
> Ross
>
>>
>> ~ Srujan
>>
>>
>> _______________________________________________
>> Xen-devel mailing list
>> Xen-devel@lists.xen.org
>> http://lists.xen.org/xen-devel
>>
>
>
> _______________________________________________
> Xen-devel mailing list
> Xen-devel@lists.xen.org
> http://lists.xen.org/xen-devel

Re: Trusted Boot with Xen 4.x

[Srujan Kotikela]

[-- Attachment #1.1: Type: text/plain, Size: 1689 bytes --]

Hi Ross,

Thanks for the pointers. The SINIT-Readme has moved to
http://software.intel.com/en-us/articles/intel-trusted-execution-technology/
.
Just leaving it here if anyone stumbles on this thread.

~ SDK


On Thu, Sep 26, 2013 at 9:01 AM, Ross Philipson
<ross.philipson@citrix.com>wrote:

> On 09/26/2013 09:49 AM, Ross Philipson wrote:
>
>> On 09/25/2013 03:43 PM, Srujan Kotikela wrote:
>>
>>> Hi,
>>>
>>> Can anyone point me to a resource to achieve trusted boot (tboot) of Xen
>>> 4.x using Intel TXT/TPM?
>>>
>>
>> You probably want to start with the tboot project at sourceforge:
>>
>> http://sourceforge.net/**projects/tboot/<http://sourceforge.net/projects/tboot/>
>>
>> There are some docs in the repo that discuss how to setup you launch
>> policies and work with the TPM. You will need to find the correct SINIT
>> module for you chipset. There is a file called SINIT-README at the above
>> site that gives you information about that part.
>>
>> If you build/install the code or install a package, you will end up with
>> tboot.gz as your multiboot module in grub and a number of tools you will
>> need to configure your system. Also google tboot and trusted boot, you
>> will get some good hits.
>>
>
> Oh sorry I forgot to add - there is a tboot-devel mailing list too -
> probably best for tboot questions to be posted there.
>
>
>
>>
>> Ross
>>
>>
>>> ~ Srujan
>>>
>>>
>>> ______________________________**_________________
>>> Xen-devel mailing list
>>> Xen-devel@lists.xen.org
>>> http://lists.xen.org/xen-devel
>>>
>>>
>>
>> ______________________________**_________________
>> Xen-devel mailing list
>> Xen-devel@lists.xen.org
>> http://lists.xen.org/xen-devel
>>
>
>

[-- Attachment #1.2: Type: text/html, Size: 3061 bytes --]

[-- Attachment #2: Type: text/plain, Size: 126 bytes --]

_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xen.org
http://lists.xen.org/xen-devel