Virtualizing secure vault of data processing unit for secure hardware security module for hosts

A non-transitory computer-readable medium storing instructions that, when executed, cause a processor to perform operations, comprising:

• operably coupling a set of components associated with a host comprising a data processing unit (DPU) secure vault and a firmware trusted platform module (TPM);
• configuring the firmware TPM as a virtual firmware TPM;
• securing, by the DPU secure vault of the DPU, the virtual firmware TPM into one or more virtual firmware TPMs based on one or more partitions configured with the DPU secure vault;
• and
• managing, by a virtual TPM manager communicatively coupled to the DPU secure vault, the one or more virtual TPMs for hosting a set of containers.

A system for virtualizing a firmware Trusted Platform Module (TPM) comprising:

• at least one data processing unit (DPU) secure vault;
• and
• a firmware TPM;
• wherein the DPU secure vault is partitioned into one or more security domains,
• wherein the firmware TPM is virtualized into at least one virtual firmware TPM, and
• wherein the one or more security domains of the DPU secure vault are configured to secure, the at least one firmware TPM is controlled by a virtual TPM manager.