Method and apparatus for sharing an integrity security module in a dual-environment computing device

A method comprising:

• detecting, during an initialization sequence, a power state transition of an operating environment of a dual-environment computing device comprising a Trusted Platform Module (“TPM”), the operating environment entering a low power quiesced state, another operating environment of the dual-environment computing device assuming control of the computing device in response to the initialization sequence, operating environments of the computing device having been booted and having access to the TPM, the operating environment and the another operating environment sharing specific registers of the TPM, wherein one or more of the specific registers are used to store integrity values for respective operating environments of the dual-environment computing device;
• regenerating a plurality of integrity values from a stored integrity metric log in response to detecting the power state transition of the operating environment of the dual-environment computing device, the integrity values for the another operating environment assuming control of the computing device;
• and
• storing the integrity values in the shared specific registers.

A computer program product comprising a storage device storing computer usable program code executable to perform operations comprising:

• detecting, during an initialization sequence, a power state transition of an operating environment of a dual-environment computing device comprising a Trusted Platform Module (“TPM”), the operating environment entering a low power quiesced state, another operating environment of the dual-environment computing device assuming control of the computing device in response to the initialization sequence, operating environments of the computing device having been booted and having access to the TPM, the operating environment and the another operating environment sharing specific registers of the TPM, wherein one or more of the specific registers are used to store integrity values for the operating environment and the another operating environment;
• regenerating a plurality of Platform Configuration Register (“PCR”) digest values from a stored integrity metric log in response to detecting the power state transition of the operating environment of the dual-environment computing device, the integrity values for the another operating environment assuming control of the computing device;
• and
• storing the digest values in the shared specific registers.