]> xenbits.xensource.com Git - people/liuw/stubdom.git/commit
vtpm: add ordinal for obtaining an EK signature
authorDaniel De Graaf <dgdegra@tycho.nsa.gov>
Mon, 21 Apr 2014 17:23:02 +0000 (13:23 -0400)
committerIan Campbell <ian.campbell@citrix.com>
Wed, 23 Apr 2014 10:57:53 +0000 (11:57 +0100)
commit3aced2b6fbd944bd8742dbdb52d91015f6789d7f
treef41eb5e67f48d619588f622437a4efc24f786818
parent6cd49adb4ae552dc314234466cc8a7f067ac47e3
vtpm: add ordinal for obtaining an EK signature

For a vTPM to be useful for remote attestation, proof that the vTPM's EK
was generated and held within a secure vTPM implementation is necessary.
This patch adds an ordinal to the vTPM which will request a quote
providing this evidence from the TPM Manager; it only functions during
the first startup of a given vTPM in order to provide proof that the EK
was freshly generated (and not a key whose private part is available
elsewhere).

Signed-off-by: Daniel De Graaf <dgdegra@tycho.nsa.gov>
Acked-by: Ian Campbell <ian.campbell@citrix.com>
Makefile
vtpm-parent-sign-ek.patch [new file with mode: 0644]
vtpm/vtpm_cmd.c