Automated methods and systems for performing host attestation using a smart network interface controller
This disclosure is directed to automated processes for attesting to trustworthiness of a host considered for connection to a data center network. The attestation process is performed in two attestation phases. In the first phase, attestation is performed on a smart network interface controller (“SNIC”) connected to an internal bus of the host using a first trusted platform module (“TPM”) of the SNIC. In the second phase, attestation is performed on the host by the SNIC using a second TPM connected to the internal bus of the host in response to a determination that the SNIC is trustworthy. The host is connected to the data center network in response to a determination by the SNIC that the host is trustworthy.
1. A process for attesting to trustworthiness of a host considered for connection to a data center network, the process comprising:
performing attestation of a smart network interface controller (“SNIC”) of the host using a first trusted platform module (“TPM”) of the SNIC by a security authority of the data center;
directing the SNIC to perform attestation of the host when the security authority determines the SNIC is trustworthy;
performing attestation of the host using a second TPM of the host by the SNIC; and
connecting the host to the data center network in response to a determination by the SNIC that the host is trustworthy.
2. The process of claim 1 wherein performing attestation of the SNIC comprises:
requesting an endorsement key (“EK”) certificate from the SNIC by the security authority;
in response to receiving a request for the EK certificate, requesting the EK certificate from the first TPM by the SNIC;
forwarding the EK certificate from the SNIC to the security authority;
requesting a platform configuration register (“PCR”) value, event log of the SNIC, and an attestation identification key (“AIK”) from the SNIC in response to the security authority verifying the EK certificate is authentic;
in response to receiving a request for the PCR value, the event log of the SNIC, and the AIK, requesting the PCR value and AIK from the first TPM by the SNIC;
retrieving the event log of the SNIC from memory of the SNIC; and
forwarding the PCR, the event log of the SNIC, and the AIK from the SNIC to the security authority; and
verifying trustworthiness of the SNIC based on contents of the PCR, the event log of the SNIC, and the AIK.
3. The process of claim 1 wherein directing the SNIC to perform attestation of the host comprises directing an attestation agent of the SNIC to perform attestation of the host when the security authority determines the SNIC is trustworthy.
4. The process of claim 1 wherein performing attestation of the host comprises:
requesting an endorsement key (“EK”) certificate from the host by the SNIC;
in response to receiving a request for the EK certificate, requesting the EK certificate from the second TPM by the host;
forwarding the EK certificate from the host to the SNIC;
requesting a Platform configuration register (“PCR”), event log of the host, and an attestation identification key (“AIK”) from the host in response to the SNIC verifying the EK certificate is authentic;
in response to receiving a request for the PCR, the event log of the host, and the AIK, requesting the PCR and the AIK from the second TPM by the host;
retrieving the event log of the host from memory or disk of the host;
forwarding the PCR, the event log of the host, and the AIK from the host to the SNIC; and
verifying trustworthiness of the host based on contents of the PCR, the event log of the host, and the AIK.
5. The process of claim 1 wherein performing attestation of the SNIC and attestation of the host comprises isolating the host from the data center network.
6. The process of claim 1 further comprising denying the host access to the data center network when the security authority determines the SNIC is not trustworthy and when the SNIC determines the host is not trustworthy.
7. An automated process for attesting to trustworthiness of a host considered for connection to a data center network, the process comprising:
performing attestation of a smart network interface controller (“SNIC”) of the host using a first trusted platform module (“TPM”) of the SNIC;
performing attestation of the host using a second TPM connected to an internal bus of the host using an attestation agent of the SNIC when the SNIC is deemed trustworthy; and
connecting the host to the data center network when the attestation agent determines the host is trustworthy.
8. The process of claim 7 wherein performing attestation of the SNIC comprises:
requesting an endorsement key (“EK”) certificate from first TPM of the SNIC;
requesting a platform configuration register (“PCR”) value and an attestation identification key (“AIK”) from the first TPM in response to a verification that the EK certificate is authentic;
requesting an event log of the SNIC from the SNIC; and
verifying trustworthiness of the SNIC based on contents of the PCR, the event log of the SNIC, and the AIK.
9. The process of claim 7 further comprising directing an attestation agent of the SNIC to perform attestation of the host in response to a determination that the SNIC is trustworthy.
10. The process of claim 7 wherein performing attestation of the host comprises:
requesting an endorsement key (“EK”) certificate from the host by an attestation agent of the SNIC;
in response to receiving a request for the EK certificate, requesting the EK certificate from the second TPM by the host;
forwarding the EK certificate from the host to the attestation agent of the SNIC:
requesting a platform configuration register (“PCR”) value and an attestation identification key (“AIK”) from the host in response to the attestation agent of the SNIC verifying the EK certificate is authentic;
in response to receiving a request for the PCR and the AIK, requesting the PCR and the AIK from the second TPM by the host;
retrieving the event log of the host from memory or disk of the host;
forwarding the PCR the event log of the host, and the AIK from the host to the attestation agent of the SNIC; and
verifying trustworthiness of the host based on contents of the PCR, the event log of the host, and the AIK.
11. The process of claim 7 wherein performing attestation of the SNIC and attestation of the host comprises isolating the host from the data center network.
12. The process of claim 7 further comprising denying the host access to the data center network when the security authority determines the SNIC is not trustworthy and when the SNIC determines the host is not trustworthy.
13. A system comprising:
a host comprising a first trusted platform module (“TPM”) connected to an internal bus of the host;
a smart network interface controller (“SNIC”) comprising a second TPM, the SNIC having a connection to the internal bus of the host; and
a security authority connected to a data center network and connected to the SNIC, wherein the security authority performs attestation of the SNIC using the second TPM to determine trustworthiness of the SNIC and directs the SNIC to perform attestation of the host using the first TPM when the security authority determines the SNIC is trustworthy.
14. The system of claim 13 wherein the SNIC is connected to the internal bus of the host comprises the SNIC located within a housing of the host.
15. The system of claim 13 wherein the SNIC comprises an attestation agent that performs attestation of the host.
16. The system of claim 13 wherein the security authority directs the SNIC to perform attestation of the host using the first TPM comprises the security authority sends instructions to an attestation agent of the SNIC to perform attestation of the host.