Project Cerberus: Hardware Root of Trust for Cloud Security
Explore Project Cerberus, a hardware root of trust initiative, in this 35-minute Linux Foundation talk by Bryan Kelly from Microsoft. Dive into the cryptographic microcontroller's role in providing hardware-enforced secure boot with digital signature enforcement and measured boot. Learn about the cloud firmware threat vectors, guiding principles for firmware security, and the current state of industry servers. Discover the Cerberus ASIC, its dedicated security microprocessor, and how it interacts with platform components. Understand the scalable security architecture, platform attestation, and the Platform Firmware Manifest (PFM). Gain insights into Microsoft's approach to enhancing cloud server infrastructure security through innovative firmware solutions.