Hi, Can anyone point me to a resource to achieve trusted boot (tboot) of Xen 4.x using Intel TXT/TPM? ~ Srujan _______________________________________________ Xen-devel mailing list Xen-devel@lists.xen.org http://lists.xen.org/xen-devel
On 09/25/2013 03:43 PM, Srujan Kotikela wrote:> Hi, > > Can anyone point me to a resource to achieve trusted boot (tboot) of Xen > 4.x using Intel TXT/TPM?You probably want to start with the tboot project at sourceforge: http://sourceforge.net/projects/tboot/ There are some docs in the repo that discuss how to setup you launch policies and work with the TPM. You will need to find the correct SINIT module for you chipset. There is a file called SINIT-README at the above site that gives you information about that part. If you build/install the code or install a package, you will end up with tboot.gz as your multiboot module in grub and a number of tools you will need to configure your system. Also google tboot and trusted boot, you will get some good hits. Ross> > ~ Srujan > > > _______________________________________________ > Xen-devel mailing list > Xen-devel@lists.xen.org > http://lists.xen.org/xen-devel >
On 09/26/2013 09:49 AM, Ross Philipson wrote:> On 09/25/2013 03:43 PM, Srujan Kotikela wrote: >> Hi, >> >> Can anyone point me to a resource to achieve trusted boot (tboot) of Xen >> 4.x using Intel TXT/TPM? > > You probably want to start with the tboot project at sourceforge: > > http://sourceforge.net/projects/tboot/ > > There are some docs in the repo that discuss how to setup you launch > policies and work with the TPM. You will need to find the correct SINIT > module for you chipset. There is a file called SINIT-README at the above > site that gives you information about that part. > > If you build/install the code or install a package, you will end up with > tboot.gz as your multiboot module in grub and a number of tools you will > need to configure your system. Also google tboot and trusted boot, you > will get some good hits.Oh sorry I forgot to add - there is a tboot-devel mailing list too - probably best for tboot questions to be posted there.> > > Ross > >> >> ~ Srujan >> >> >> _______________________________________________ >> Xen-devel mailing list >> Xen-devel@lists.xen.org >> http://lists.xen.org/xen-devel >> > > > _______________________________________________ > Xen-devel mailing list > Xen-devel@lists.xen.org > http://lists.xen.org/xen-devel
Hi Ross, Thanks for the pointers. The SINIT-Readme has moved to http://software.intel.com/en-us/articles/intel-trusted-execution-technology/ . Just leaving it here if anyone stumbles on this thread. ~ SDK On Thu, Sep 26, 2013 at 9:01 AM, Ross Philipson <ross.philipson@citrix.com>wrote:> On 09/26/2013 09:49 AM, Ross Philipson wrote: > >> On 09/25/2013 03:43 PM, Srujan Kotikela wrote: >> >>> Hi, >>> >>> Can anyone point me to a resource to achieve trusted boot (tboot) of Xen >>> 4.x using Intel TXT/TPM? >>> >> >> You probably want to start with the tboot project at sourceforge: >> >> http://sourceforge.net/**projects/tboot/<http://sourceforge.net/projects/tboot/> >> >> There are some docs in the repo that discuss how to setup you launch >> policies and work with the TPM. You will need to find the correct SINIT >> module for you chipset. There is a file called SINIT-README at the above >> site that gives you information about that part. >> >> If you build/install the code or install a package, you will end up with >> tboot.gz as your multiboot module in grub and a number of tools you will >> need to configure your system. Also google tboot and trusted boot, you >> will get some good hits. >> > > Oh sorry I forgot to add - there is a tboot-devel mailing list too - > probably best for tboot questions to be posted there. > > > >> >> Ross >> >> >>> ~ Srujan >>> >>> >>> ______________________________**_________________ >>> Xen-devel mailing list >>> Xen-devel@lists.xen.org >>> http://lists.xen.org/xen-devel >>> >>> >> >> ______________________________**_________________ >> Xen-devel mailing list >> Xen-devel@lists.xen.org >> http://lists.xen.org/xen-devel >> > >_______________________________________________ Xen-devel mailing list Xen-devel@lists.xen.org http://lists.xen.org/xen-devel