2018 OCP U.S. Summit

Network security and validating the software running on data center systems has never been more important.

The central components for launching trusted operating system environments are the family of technologies described by the Universal Extensible Firmware Interface (UEFI) Secure Boot and the Trusted Computer Group (TCG) Trusted Platform Module (TPM) specifications.

This talk discusses the progress of the Open Network Install Environment (ONIE) project to address the challenges of deploying secure technologies on network switches.

The goal is to combine the industry standard security components of UEFI and TCG with the easy to use image discovery features of ONIE.

The benefits are:
- Maintains the established image discovery methods of ONIE
- Build on industry standard specifications and technologies
- Support measured boot using the TPM
- Support for x86_64 and AARCH64 UEFI firmwares