Главная
Study mode:
on
1
Intro
2
How it started?
3
In Parallel - other patches in discussion
4
Existing Interfaces
5
Existing Kernel code structure
6
Environments are different - syntactically and semantically
7
Proposal - Firmware Security Filesystem (fwsecurityfs)
8
securityfs vs fwsecurityfs
9
PowerVM Guest Secure Boot Flow
10
Authenticated Variables Stored in Platform KeyStore
11
PowerVM: Platform Keystore Other Usecases
12
PowerPC Authenticated Variables exposed via fwsecurityfs
Description:
Explore the intricacies of securing Linux credentials locally using PowerVM Platform Keystore in this informative conference talk. Delve into the challenges of storing security-sensitive information for early boot processes and learn about IBM's solution through an isolated Platform Keystore (PKS) storage mechanism. Discover the proposed Linux kernel interface for managing PKS objects and understand the complexities of developing a unified interface across different platforms. Examine existing kernel code structures, compare securityfs and fwsecurityfs, and gain insights into PowerVM Guest Secure Boot Flow. Investigate the storage of authenticated variables in Platform KeyStore and explore additional use cases for PowerVM Platform Keystore. This presentation offers a comprehensive look at the evolving landscape of Linux security and firmware interfaces.

PowerVM Platform Keystore - Securing Linux Credentials Locally

Linux Foundation
Add to list
0:00 / 0:00