Configurable client hardware
Various systems and methods for configuring a pluggable computing device are described herein. A pluggable computing device may be configured to be compatible with a pluggable host system using a default communication channel to obtain configuration settings and configure a programmable logic device on the pluggable computing device. The pluggable computing device may perform chain of trust processing on the pluggable host system. The pluggable computing device may be disposed on a compute card, which may include a heat sink in a particular configuration.
1. A pluggable computing device for implementing a chain of trust, the pluggable computing device comprising:
a processor subsystem; and
memory including instructions, which when executed by the processor subsystem, cause the processor subsystem to:
initiate a secure boot process at the pluggable computing device;
access, from a pluggable host system: (1) a set of original equipment manufacturer (OEM)-defined platform parameters, (2) an OEM certificate from the OEM that provided the OEM-defined platform parameters, and (3) a signature from the pluggable host system, the pluggable host system being coupled to the pluggable computing device and together forming a pluggable system, the set of OEM-defined platform parameters signed by the OEM certificate and used by the pluggable computing device to reconfigure itself;
verify, at the pluggable computing device, the authenticity of the OEM certificate;
verify, at the pluggable computing device, the OEM-defined platform parameters;
store, at the pluggable computing device, the OEM-defined platform parameters, the OEM certificate, and the signature at the pluggable computing device when the authenticity of the OEM certificate and the OEM-defined platform parameters are verified; and
use, at the pluggable computing device, the OEM-defined platform parameters in a subsequent boot process or chain of trust processing of the pluggable system.
2. The pluggable computing device of claim 1 , wherein initiating the secure boot measure process is in response to a reset event or a power on event.
3. The pluggable computing device of claim 1 , wherein initiating the secure boot measure process is in response to receiving a remote attestation request.
4. The pluggable computing device of claim 1 , wherein to store the OEM defined platform parameters, the processor subsystem is to store the OEM defined platform parameters at a non-volatile memory at the pluggable computing device.
5. The pluggable computing device of claim 1 , wherein to store the OEM certificate and the signature, the processor subsystem is to store the OEM certificate and the signature at the pluggable computing device in a trusted platform management module.
6. The pluggable computing device of claim 1 , wherein to verify the OEM-defined platform parameters, the processor subsystem is to use an OEM public code verification key to verify the OEM-defined platform parameters.
7. The pluggable computing device of claim 1 , wherein the OEM-defined platform parameters include input/output (I/O) types supported by the pluggable host system.
8. The pluggable computing device of claim 1 , wherein the OEM-defined platform parameters include input/output (I/O) pin mappings to use with the pluggable host system.
9. The pluggable computing device of claim 1 , wherein the OEM-defined platform parameters include hardware accelerator functions to use with the pluggable host system.
10. The pluggable computing device of claim 1 , wherein the OEM-defined platform parameters include a pointer to a programmable logic device configuration file for use when reconfiguring the pluggable computing device.
11. A method for implementing a chain of trust for a pluggable computing device, the method performed by the pluggable computing device, the method comprising:
initiating a secure boot process at the pluggable computing device;
accessing, by the pluggable computing device from a pluggable host system: (1) a set of original equipment manufacturer (OEM)-defined platform parameters, (2) OEM certificate from the OEM that provided the OEM-defined platform parameters, and (3) a signature from the pluggable host system, the pluggable host system being coupled to the pluggable computing device and together forming a pluggable system, the set of OEM-defined platform parameters signed by the OEM certificate and used by the pluggable computing device to reconfigure itself;
verifying, at the pluggable computing device, the authenticity of the OEM certificate;
verifying at the pluggable computing device, the OEM-defined platform parameters;
storing, at the pluggable computing device, the OEM-defined platform parameters, the OEM certificate, and the signature at the pluggable computing device when the authenticity of the OEM certificate and the OEM defined platform parameters are verified; and
using, at the pluggable computing device, the OEM-defined platform parameters in a subsequent boot process or chain of trust processing of the pluggable system.
12. The method of claim 11 , wherein initiating the secure boot measure process is in response to a reset event or a power on event.