Technologies for secure device configuration and management
Technologies for secure device configuration and management include a computing device having an I/O device. A trusted agent of the computing device is trusted by a virtual machine monitor of the computing device. The trusted agent securely commands the I/O device to enter a trusted I/O mode, securely commands the I/O device to set a global lock on configuration registers, receives configuration data from the I/O device, and provides the configuration data to a trusted execution environment. In the trusted I/O mode, the I/O device rejects a configuration command if a configuration register associated with the configuration command is locked and the configuration command is not received from the trusted agent. The trusted agent may provide attestation information to the trusted execution environment. The trusted execution environment may verify the configuration data and the attestation information. Other embodiments are described and claimed.
1. A computing device comprising:
processor circuitry coupled to a memory;
an input/output (I/O) device coupled to the processor circuitry; and
a trusted agent coupled to or hosted by the processor circuitry, the trusted agent to:
authenticate the I/O device;
perform an authenticated key exchange protocol with the I/O device in response to authentication of the I/O device;
verify a device configuration report in response to performance of the authenticated key exchange protocol, wherein the device configuration report is indicative of configuration registers of the I/O device; and
send the device configuration report to a trusted execution environment of the computing device in response to verification of the device configuration report, wherein the trusted execution environment includes a predetermined identify that is known to a trusted firmware component of the computing device.
2. The computing device of claim 1 , wherein the trusted agent is further to:
provide a trusted agent attestation report to the trusted firmware component of the computing device;
perform an authenticated key exchange protocol with the trusted execution environment in response to providing of the trusted agent attestation report; and
receive a request to authenticate the I/O device from a host operating system of the computing device, wherein to receive the request to authenticate the I/O device comprises to receive a device certificate, wherein
to authenticate the I/O device comprises to authenticate the I/O device with the device certificate in response to receipt of the request to authenticate the I/O device.
3. The computing device of claim 1 , wherein:
to perform the authenticated key exchange protocol with the I/O device comprises to provision a shared secret key to the I/O device; and
to verify the device configuration report comprises to verify integrity of the device configuration report with the shared secret key.
4. The computing device of claim 1 , wherein:
the host operating system of the computing device to:
command the I/O device to lock configuration of the I/O device;
receive the device configuration report from the I/O device in response to commanding of the I/O device to lock the configuration; and
provide the device configuration report to the trusted agent; and
the trusted agent is further to receive the device configuration report from the host operating system.
5. The computing device of claim 1 , wherein the trusted agent is further to:
determine whether the I/O device is assigned to a different trusted execution environment in response to verification of the device configuration report;
record a binding between the I/O device and the trusted execution environment in response to a determination that the I/O device is not assigned to a different trusted execution environment; and
send the device configuration report to the trusted execution environment further comprises to send the device configuration report to the trusted execution environment in response to recordation of the binding.
6. The computing device of claim 5 , wherein the trusted agent is further to:
receive a request to reclaim the I/O device from the host operating system;
verify, with the trusted firmware component of the computing device, that the trusted execution environment is terminated in response to receipt of the request to reclaim the I/O device; and
remove the binding between the I/O device and the trusted execution environment in response to verification that the trusted execution environment is terminated.
7. The computing device of claim 6 , wherein the trusted agent is further to:
receive a request to reclaim the I/O device from the host operating system;
verify that the I/O device is removed from the computing device in response to receipt of the request to reclaim the I/O device; and
remove the binding between the I/O device and the trusted execution environment in response to verification that the I/O device is removed, and wherein the trusted execution environment to:
verify the device configuration report in response to sending of the device configuration report; and
perform trusted I/O with the I/O device in response to verification of the device configuration report, wherein to perform the trusted I/O comprises to securely transfer, by the I/O device, I/O data with a link encryption key.
8. The computing device of claim 7 , wherein to verify the device configuration report comprises: to verify a device feature of the I/O device, to verify a register address indicated by the device configuration report, or to verify a link encryption status indicated by the device configuration report, wherein the trusted agent comprises a first trust domain and wherein the trusted execution environment comprises a second trust domain.
9. A method comprising:
providing, by a trusted agent of a computing device, a trusted agent attestation report to a trusted firmware component of the computing device;
performing, by the trusted agent, an authenticated key exchange protocol with a trusted execution environment of the computing device in response to providing the trusted agent attestation report;
authenticating, by the trusted agent, an input/output (I/O) device of the computing device;
performing, by the trusted agent, the authenticated key exchange protocol with the I/O device in response to authenticating the I/O device;
verifying, by the trusted agent, a device configuration report in response to performing the authenticated key exchange protocol, wherein the device configuration report is indicative of configuration registers of the I/O device; and
sending, by the trusted agent, the device configuration report to the trusted execution environment in response to verifying the device configuration report, wherein the trusted execution environment includes a predetermined identify that is known to a trusted firmware component of the computing device.
10. The method of claim 9 , further comprising:
performing, by the trusted agent, the authenticated key exchange protocol with the I/O device comprises provisioning a shared secret key to the I/O device; and
verifying, by the trusted agent, the device configuration report comprises verifying integrity of the device configuration report with the shared secret key;
commanding, by a host operating system of the computing device, the I/O device to lock configuration of the I/O device;
receiving, by the host operating system, the device configuration report from the I/O device in response to commanding the I/O device to lock the configuration;
providing, by the host operating system, the device configuration report to the trusted agent; and
receiving, by the trusted agent, the device configuration report from the host operating system.
11. The method of claim 10 , further comprising:
determining, by the trusted agent, whether the I/O device is assigned to a different trusted execution environment in response to verifying the device configuration report;
recording, by the trusted agent, a binding between the I/O device and the trusted execution environment in response to determining that the I/O device is not assigned to a different trusted execution environment; and
sending the device configuration report to the trusted execution environment further comprises sending the device configuration report to the trusted execution environment in response to recording the binding.
12. At least one non-transitory computer-readable medium having stored thereon instructions which, when executed, cause a computing device to facilitate operations comprising:
providing a trusted agent attestation report to a trusted firmware component of the computing device;
performing an authenticated key exchange protocol with a trusted execution environment of the computing device in response to providing the trusted agent attestation report;
authenticating an input/output (I/O) device of the computing device;
performing an authenticated key exchange protocol with the I/O device in response to authenticating the I/O device;
verifying a device configuration report in response to performing the authenticated key exchange protocol, wherein the device configuration report is indicative of configuration registers of the I/O device; and
sending the device configuration report to the trusted execution environment in response to verifying the device configuration report, wherein the trusted execution environment includes a predetermined identify that is known to a trusted firmware component of the computing device.
13. The non-transitory computer-readable medium of claim 12 , wherein the operations further comprise:
performing the authenticated key exchange protocol with the I/O device comprises provisioning a shared secret key to the I/O device; and
verifying the device configuration report comprises verifying integrity of the device configuration report with the shared secret key;
commanding the I/O device to lock configuration of the I/O device;
receiving the device configuration report from the I/O device in response to commanding the I/O device to lock the configuration;
providing the device configuration report to a trusted agent; and
receiving the device configuration report from the host operating system.
14. The non-transitory computer-readable medium of claim 13 , wherein the operations further comprise:
determining whether the I/O device is assigned to a different trusted execution environment in response to verifying the device configuration report; and
recording a binding between the I/O device and the trusted execution environment in response to determining that the I/O device is not assigned to a different trusted execution environment; and
sending the device configuration report to the trusted execution environment further comprises to send the device configuration report to the trusted execution environment in response to recording the binding.