Establishing virtual endorsement credentials for dynamically generated endorsement keys in a trusted computing platform
A method and apparatus are disclosed in a data processing system for establishing virtual endorsement credentials. The data processing system includes a hardware trusted platform module (TPM). Logical partitions are generated in the system. A different virtual TPM is generated for each one of the logical partitions. For each one of the logical partitions, the virtual TPM that was generated for the logical partition then dynamically generates a virtual endorsement key, which is stored only within a corresponding virtual TPM. Using the virtual endorsement key, each virtual TPM also generates a virtual endorsement credential for use by the logical partition that includes the virtual TPM. The virtual endorsement credential is generated within the data processing system without the data processing system or its devices accessing a trusted third party that is external to the data processing system.
1. A method in a data processing system for establishing virtual endorsement credentials, said data processing system including a hardware trusted platform module (TPM), said method comprising:
storing a platform signing key (PSK) in said hardware TPM, but said hardware TPM not including an endorsement key (EK) or endorsement credential (EC);
generating a plurality of logical partitions in said system;
for each of said plurality of logical partitions, dynamically generating a different virtual TPM;
generating, by each of said virtual TPMs, a virtual endorsement key (vEK);
storing each of said vEKs only within a corresponding virtual TPM;
generating, by each of said virtual TPMs, a virtual endorsement credential (vEC), for use by said corresponding logical partitions, by signing each of said vEKs using said PSK received from said hardware TPM; and
each of said vECs being generated within said data processing system without accessing a trusted third party that is external to said data processing system.
2. The method of claim 1 , wherein said virtual endorsement key (vEK) includes a virtual endorsement public key and a virtual endorsement private key, for use by said corresponding virtual TPM, the method further comprising:
storing, in said hardware TPM during manufacturing of said hardware TPM, a PSK certificate;
in response to receiving a request from a first logical partition to generate an AIK certificate, sending, by a first virtual TPM corresponding to said first logical partition, an AIK public key to said first logical partition;
generating, by said first logical partition, an AIK certificate request including said AIK public key;
receiving, by said first logical partition, said corresponding vEK from said first virtual TPM;
requesting, by said first logical partition, said PSK certificate from said first virtual TPM, said first virtual TPM in turn requesting said PSK certificate from said hardware TPM;
sending, by said first logical partition, said AIK certificate request, said vEK, and said PSK certificate to a trusted third party;
receiving, by said first logical partition, said encrypted AIK certificate from said trusted third party; and
decrypting, by said first virtual TMP, said encrypted AIK certificate for use by said first logical partition.
3. An apparatus in a data processing system for establishing virtual endorsement credentials, said data processing system including a hardware trusted platform module (TPM), said apparatus comprising:
said hardware TPM for storing a platform signing key (PSK), but not for storing an endorsement key pair (EK) and endorsement credential (EC);
said system including a plurality of logical partitions;
for each of said plurality of logical partitions, a hypervisor for dynamically generating a different virtual TPM for each of said plurality of logical partitions;
each of said virtual TPMs for generating a virtual endorsement key pair (vEK), and for storing each of said vEKs only within a corresponding virtual TPM;
each of said virtual TPMs for generating a virtual endorsement credential (vEC), for use by said corresponding logical partitions, by signing each of said vEKs using said PSK received from said hardware TPM; and
each of said vECs being generated within said data processing system without accessing a trusted third party that is external to said data processing system.
4. The apparatus of claim 3 , wherein said virtual endorsement key (vEK) includes a virtual endorsement public key and a virtual endorsement private key, for use by said corresponding virtual TPM, the apparatus further comprising:
said hardware TPM for storing a PSK certificate during manufacturing of said hardware TPM);
in response to receiving a request from a first logical partition to generate an AIK certificate, a first virtual TPM corresponding to said first logical partition, for sending an AIK public key to said first logical partition;
said first logical partition for generating an AIK certificate request including said AIK public key;
said first logical partition for receiving said vEK from said first virtual TPM;
said first logical partition for requesting said PSK certificate from said first virtual TPM, said virtual TPM in turn for requesting said PSK certificate from said hardware TPM;
said first logical partition for sending said AIK certificate request, said vEK, and said PSK certificate to a trusted third party;
said logical partition for receiving an encrypted AIK certificate from said trusted third party; and
said virtual TMP for decrypting said encrypted AIK certificate for use by said logical partition.