METHOD AND APPARATUS FOR REMOTELY PROVISIONING SOFTWARE-BASED SECURITY COPROCESSORS

摘要

A virtual security coprocessor is created in a first processing system. The virtual security coprocessor is then transferred to a second processing system, for use by the second processing system. For instance, the second processing system may use the virtual security coprocessor to provide attestation for the second processing system. In an alternative embodiment, a virtual security coprocessor from a first processing system is received at a second processing system. After receiving the virtual security coprocessor from the first processing system, the second processing system uses the virtual security coprocessor. Other embodiments are described and claimed.

主权项

1. At least one non-transitory machine-readable storage medium including instructions that if executed cause a first processing system to:
create a virtual trusted platform module for a virtual machine of the first processing system; facilitate creation of an endorsement key for the virtual trusted platform module, wherein the endorsement key is to be stored in a storage; migrate the virtual trusted platform module to a second processing system, the virtual trusted platform module migration to send a state of the virtual trusted platform module to the second processing system, the state of the virtual trusted platform module including the endorsement key; and delete information associated with the virtual trusted platform module from the first processing system.