vTPM: virtualizing the trusted platform module

摘要: We present the design and implementation of a system that enables trusted computing for an unlimited number virtual machines on single hardware platform. To this end, we virtualized Trusted Platform Module (TPM). As result, TPM's secure storage cryptographic functions are available to operating systems applications running in machines. Our new facility supports higher-level services establishing trust environments, example remote attestation software integrity. We implemented full TPM specification added create destroy instances. integrated our into hypervisor environment make suspend resume operations, as well migration instance with its respective machine across platforms. four designs certificate chains link TPM, security vs. efficiency trade-offs based threat models. Finally, demonstrate working by layering existing integrity measurement application top facility.