Cloud based boot integrity

A method implemented in a storage platform that comprises at least one compute node with at least one general purpose processor, memory, a secure cryptoprocessor, and non-volatile storage, the method comprising:

• obtaining, from the secure cryptoprocessor, observed boot data values comprising:
• a first hash that uniquely represents programs running at load/run BIOS POST;
• a second hash that uniquely represents programs running at load/run bootloader;
• a third hash that uniquely represents programs running at load/run kernel;
• and
• a fourth hash that uniquely represents the programs running at load/run runlevel programs;
• provide the observed boot data values comprising the first, second, third and fourth hashes as part of platform configuration register content included within a trusted platform quote along with a nonce and an attestation integrity key (AIK) signature, to a remote verifier in a secure remote network that does not contain the storage platform for comparison with expected boot data values;
• and
• responsive to a control command from the remote verifier generated in response to mismatch between the observed boot data values and the expected boot data values, limiting functionality of the storage platform.

A non-transitory computer-readable storage medium storing instructions that when executed by a compute node cause the compute node to perform a method for checking boot integrity, the method comprising:

• obtaining, from a secure cryptoprocessor, observed boot data values comprising:
• a first hash that uniquely represents programs running at load/run BIOS POST;
• a second hash that uniquely represents programs running at load/run bootloader;
• a third hash that uniquely represents programs running at load/run kernel;
• and
• a fourth hash that uniquely represents the programs running at load/run runlevel programs;
• provide the observed boot data values comprising the first, second, third and fourth hashes as part of platform configuration register content included within a trusted platform quote along with a nonce and an attestation integrity key (AIK) signature, to a remote verifier in a secure remote network that does not contain the storage platform for comparison with expected boot data values;
• and
• responsive to a control command from the remote verifier generated in response to mismatch between the observed boot data values and the expected boot data values, limiting functionality of the compute node.