Method and system for implementing software trusted platform module for a virtual machine

Abstract

A method and system for implementing software trusted platform module (swTPM) for a virtual machine (VM). A guest VM is set up in the system. A tenant trust domain (TTD) or a Software Guard Extension (SGX) enclave is also set up in the system, and a swTPM for the guest VM is executed within the TTD or the SGX enclave. The tenant workload and the guest VM may be measured, and the measurements may be extended into Platform Configuration Registers (PCRs) in the swTPM via a swTPM interface in the guest VM. TPM secrets may be stored in a secure storage in the SGX enclave. The TTD may take runtime measurements of the tenant workload, the guest VM, and/or the swTPM.

Dependencies are inferred from the claim text.