Loading patent…
AssigneeMicrosoft Technology Licensing, LLC
InventorsPushkar Vijay CHITNIS, Michael Anthony McREYNOLDS, David Kimler ALTOBELLI, Gangadhara Swamy Shivaganga NAGARAJU, Michael Bishop EBERSOL
Estimating the term…
Systems, methods, and computer readable storage media described herein provide techniques for generating a virtual trusted platform module (vTPM) in an isolated region of a computing system. In an aspect, guest firmware of a virtual machine (VM) executing on device determines a state based on a configuration of the guest firmware. The guest firmware generates a vTPM based on the state and causes the vTPM to perform a cryptographic operation. In an aspect, the state is determined independent of state information external to the VM. In another aspect, the cryptographic operation includes unsealing a state of an operating system of the VM. The unsealed state is utilized to securely boot the operating system. In another aspect, the cryptographic operation includes sealing a state of an application hosted by the operating system. In another aspect, the VM is a confidential VM that isolates the vTPM from other services of the VM.
A system comprising:
A method performed by a guest firmware of a virtual machine executing on a computing device, the method comprising:
A computer-readable storage medium encoded with program instructions comprising guest firmware, the guest firmware of a virtual machine structured to cause a processor circuit to perform a method comprising:
Dependencies are inferred from the claim text.