Method and apparatus for remotely provisioning software-based security coprocessors

摘要

A virtual security coprocessor is created in a first processing system. The virtual security coprocessor is then transferred to a second processing system, for use by the second processing system. For instance, the second processing system may use the virtual security coprocessor to provide attestation for the second processing system. In an alternative embodiment, a virtual security coprocessor from a first processing system is received at a second processing system. After receiving the virtual security coprocessor from the first processing system, the second processing system uses the virtual security coprocessor. Other embodiments are described and claimed.

主权项

1. A non-transitory machine-readable storage medium including instructions that if executed cause a processing system to:
create a virtual trusted platform module for a first server of the processing system; generate an endorsement key for the virtual trusted platform module, and store the endorsement key on the first server; and migrate the virtual trusted platform module to a second server of the processing system for use by the second server; wherein the instructions to migrate include instructions to move the endorsement key to the second server.