Toward a Standard Device Attestation Token for Device Assignment

Explore the development of standardized device attestation tokens for secure device assignment to trusted virtual machines in this Linux Plumbers Conference talk. Learn about the open-source community's efforts to build frameworks and mechanisms that enable devices to be safely assigned to trusted virtual machines (TVMs) through a process called device assignment (DA). Discover how devices must provide Evidence claims following RFC9334 standards to confirm their identity, firmware state, and configuration to establish trust with TVMs. Understand the critical need for standardizing Evidence representation to ensure interoperability when these claims are consumed by third-party attestation services external to the TVM. Examine the current proposal for device attestation token standards and participate in discussions about necessary modifications, missing components, and the path forward for this specification. Gain insights into the technical challenges and solutions surrounding secure device assignment in virtualized environments, presented by experts from Linaro who are actively working on these standardization efforts.