Coursera Flash Sale
40% Off Coursera Plus for 3 Months!
Grab it
This conference talk introduces the Linaro Trusted Substrate (TS) Arm SystemReady/UEFI firmware and Trusted Reference Stack (TRS) kernel, initramfs and rootfs prototype for secure boot with TPM for secure storage. Learn about the implementation of an Arm SystemReady IR (embedded) and UEFI compatible firmware for multiple devices in the Trusted Substrate project, and how it works with the TRS components to extend UEFI secure boot to userspace. Discover the secure boot chain of trust where hardware verifies UEFI firmware, which then verifies kernel and initramfs as Unified Kernel Image (UKI) binary. Explore how the UKI binary embeds dm-verity hash to verify the rootfs, how TPM devices measure firmware and boot components, and how TPM works with systemd to create an encrypted writable filesystem tied to the secure system. The presentation covers both the TS and TRS architectures and discusses the current status of upstreaming these solutions to oe-core/poky, meta-arm, meta-security/meta-tpm, meta-secure-core and other projects, including challenges faced and solutions developed.
