TPM Support in KVM

TPM Support in KVM

[Martin Schneider]

Dear list,

is there a document that describes the level of support of trusted
computing technology in KVM and how things work?

I read in various sources that KVM should support virtual Trusted
Platform Modules in virtual machines but I coudln't find any evidence
and/or document about this on the official site.

Thanks a lot
Martin

Re: TPM Support in KVM

[Anthony Liguori]

On 01/26/2010 06:47 AM, Martin Schneider wrote:
> Dear list,
>
> is there a document that describes the level of support of trusted
> computing technology in KVM and how things work?
>
> I read in various sources that KVM should support virtual Trusted
> Platform Modules in virtual machines but I coudln't find any evidence
> and/or document about this on the official site.
>    

It is not (yet) supported in KVM.

Regards,

Anthony Liguori

> Thanks a lot
> Martin
> --
> To unsubscribe from this list: send the line "unsubscribe kvm" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
>    

Re: TPM Support in KVM

[Chris Wright]

* Martin Schneider (martincschneider@googlemail.com) wrote:
> Dear list,
> 
> is there a document that describes the level of support of trusted
> computing technology in KVM and how things work?

There's host level trusted boot, which simply needs tboot and a new
enough kernel to support CONFIG_TXT.

> I read in various sources that KVM should support virtual Trusted
> Platform Modules in virtual machines but I coudln't find any evidence
> and/or document about this on the official site.

No vTPM is currently supported.

thanks,
-chris

Re: TPM Support in KVM

[Markus Breitländer]

Am 26.01.2010 16:56, schrieb Chris Wright:
> * Martin Schneider (martincschneider@googlemail.com) wrote:
>> Dear list,
>>
>> is there a document that describes the level of support of trusted
>> computing technology in KVM and how things work?
> 
> There's host level trusted boot, which simply needs tboot and a new
> enough kernel to support CONFIG_TXT.
> 
>> I read in various sources that KVM should support virtual Trusted
>> Platform Modules in virtual machines but I coudln't find any evidence
>> and/or document about this on the official site.
> 
> No vTPM is currently supported.

Any resources to this topic (vTPM)?

I would be intrested in virtual TNC solutions (802.1x on wired networks)!

Can you virtualize a TNC "Authenticator" like a 802.1x Switch?