Systems and methods for collective attestation of SPDM-enabled devices in an information handling system (IHS)

1 . An Information Handling System (IHS) comprising:

a plurality of Security Protocol and Data Model (SPDM)-enabled devices conforming to a SPDM specification; and

at least one memory coupled to at least one processor, the at least one memory having program instructions stored thereon that, upon execution by the at least one processor, cause the instructions to:

receive an attestation request from a requesting device;

receive a device identity certificate from each of the devices;

perform a firmware measurement of each of the devices;

perform a single cryptographic hash over the firmware measurements and the received device identity certificates to generate a single measurement; and

send the single measurement to the requesting device in response to the request.

2 . The IHS of claim 1 , wherein the program instructions are performed by a Baseboard Management Controller (BMC) configured in the IHS.

3 . The IHS of claim 2 , wherein the program instructions, upon execution, further cause the IHS to:

perform a BMC firmware measurement of the BMC; and

add the BMC firmware measurement to the cryptographic hash to generate the single measurement.

4 . The IHS of claim 2 , wherein the program instructions, upon execution, further cause the IHS to:

obtain a BMC device identity certificate associated with the BMC; and

add the BMC device identity certificate to the cryptographic hash to generate the single measurement.

5 . The IHS of claim 1 , wherein the program instructions, upon execution, further cause the IHS to:

receive a device identity certificate from a portion of the SPDM-enabled devices configured in the IHS; and

perform a cryptographic hash over the portion of received device identity certificates to generate the single measurement.

6 . The IHS of claim 1 , wherein the program instructions, upon execution, further cause the IHS to reject the attestation request when the attestation request is directed to a subset of the SPDM-enabled devices.

7 . The IHS of claim 1 , wherein the requesting device is configured to compare the single measurement against a golden thumbprint, and generate an alert message when the cryptographic hash does not match the golden thumbprint.

8 . The IHS of claim 1 , wherein the program instructions, upon execution, cause the IHS to populate a Secure Component Verification (SCV)-based manifest with the received device identity certificates; and send the populated SCV-based manifest to the requesting device in response to the request, wherein the requester is configured to compare the SCV-based manifest with a SCV certificate, and validate the SCV-based manifest based upon the comparison.

9 . A collective attestation method comprising:

receiving an attestation request from a requesting device;

receiving a device identity certificate from each of a plurality of Security Protocol and Data Model (SPDM)-enabled devices conforming to a SPDM specification;

perform a firmware measurement of each of the devices;

performing a single cryptographic hash over the firmware measurements and the received device identity certificates to generate a single measurement; and

sending the single measurement to the requesting device in response to the request.

10 . The collective attestation method of claim 9 , further comprising:

performing a BMC firmware measurement of a Baseboard Management Controller (BMC) configured in an Information Handling System (IHS); and

adding the BMC firmware measurement to generate the single measurement.

11 . The collective attestation method of claim 10 , further comprising:

obtaining a BMC device identity certificate associated with the BMC; and

adding the BMC device identity certificate to the single measurement.

12 . The collective attestation method of claim 9 , further comprising:

receiving a device identity certificate from a portion of the SPDM-enabled devices configured in the IHS; and

performing a cryptographic hash over the portion of received device identity certificates to generate the single measurement.

13 . The collective attestation method of claim 9 , further comprising rejecting the attestation request when the attestation request is directed to a subset of the SPDM-enabled devices.

14 . The collective attestation method of claim 9 , further comprising comparing, by the requesting device, the single measurement against a golden thumbprint, and generating, by the requesting device, an alert message when the cryptographic hash does not match the golden thumbprint.

15 . A computer program product comprising a non-transitory computer readable storage medium having program instructions stored thereon that, upon execution by an Information Handling System (IHS), cause the IHS to:

receive an attestation request from a requesting device;

receive a device identity certificate from each of a plurality of Security Protocol and Data Model (SPDM)-enabled devices conforming to a SPDM specification;

perform a firmware measurement of each of the devices;

perform a single cryptographic hash over the firmware measurements and the received device identity certificates to generate a single measurement; and

send the single measurement to the requesting device in response to the request.

16 . The computer program product of claim 15 , wherein the program instructions, upon execution, further cause the IHS to:

perform a BMC firmware measurement of a Baseboard Management Controller (BMC) configured in an Information Handling System (IHS); and

add the BMC firmware measurement to the cryptographic hash to generate the single measurement.

17 . The computer program product of claim 15 , wherein the program instructions, upon execution, cause the IHS to populate a Secure Component Verification (SCV)-based manifest with the received device identity certificates; and send the populated SCV-based manifest to the requesting device in response to the request, wherein the requester is configured to compare the SCV-based manifest with a SCV certificate, and validate the SCV-based manifest based upon the comparison.