Figure 1: Multiple PRoTs Communicating with AMD SoCData center security is a top priority for organizations. As data centers become more complex, ensuring their security and the interoperability of their various components can be a challenging endeavor. Industry leaders have come together as part of the Open Compute Project Foundation (OCP) Security Project to improve security and interoperability through open collaboration and open standards.
A critical component of data center security is the Platform Root of Trust (PRoT), helping ensure that data center hardware and firmware are trustworthy and secure. The adoption of DMTF’s Security Protocol and Data Model (SPDM) as the transport layer communication protocol for security use cases by OCP’s Peripheral Security Specification enables interoperability between various PRoT devices from independent hardware vendors (IHVs) and platform peripherals. At AMD we build critical components (CPUs, Data Center GPUs, Machine Intelligence, DPUs) for data center platforms.
An important security use case is peripheral attestation. Peripheral attestation provides the ability to measure and attest to the integrity of the system’s components. This involves taking measurements of the system's firmware and other key components and attesting to their integrity. Our SoCs have an embedded AMD Secure Processor (ASP), which enables creation of device identity and collection of measurements of all the firmware components running on AMD SoC. Generationally, AMD SoCs are becoming more interoperable with different PRoT solutions supported by industry standards.
At OCP Global Summit 2022, we demonstrated PRoT orchestration of AMD CPUs by AMI’s Tektagon™ XFR solution. In our continued collaboration with AMI to drive interoperable PRoT firmware at the 2023 OCP Regional Summit, we are showcasing peripheral attestation using DMTF SPDM communication between the 4th Gen AMD EPYC™ processor (as the SPDM Responder) and AMI’s Tektagon XFR (as the SPDM Requestor). To further demonstrate interoperability, the peripheral attestation flow is repeated with BMC (as the SPDM Requestor) hosted on AMD’s DC-SCM card contributed to OCP.
Interested in viewing this live demo?
Participants can find this and other demonstrations at the AMD booth (A4), at the OCP Regional Summit in Prague, Czechia on April 19th, and 20th. Stop by and engage with members of AMD and AMI for further details and discussions.