Low cost trusted platform

摘要

A method and apparatus is described herein for emulating a physical trusted platform module (TPM) in a virtual monitor, such as a system management mode (SMM) or a system management interrupt (SMI) transfer monitor (STM). By allowing SMIs during a secure launch, SMM is allowed into the secure launch trust perimeter and a virtual monitor may emulate the structures, behaviors, and protected storage of a physical TMP, such as the storage of cryptographic keys, secure verification, attestation, and other TPM functions.

主权项

1. A method comprising:
generating a system management interrupt (SMI) during a secure launch of a computer system; and initializing, in response to the SMI, a stand-alone trusted platform module (TPM) emulator, which is to include at least one protected secret, in a virtual monitor during the secure launch; issuing a TPM ordinal; emulating a command stream of the TPM ordinal in the virtual monitor; and handling the command stream of the TPM ordinal in the virtual monitor.