Secure boot for BMC

[Teddy Reed]

Hi Brad,

We added a verified-boot implementation to Facebook's flavor a few
years ago, based on U-boot's and Chromium's designs. It is not well
documented publically but you can see the unit and cont-build test
harnesses here:
https://github.com/facebook/openbmc/tree/helium/tests/verified-boot

I'm happy to collaborate on future designs. At the very least I could
provide lessons learned and potential improvements. Amithash and Sai
could provide valuable input too.
-Teddy


On Tue, Feb 5, 2019 at 9:14 AM Brad Bishop <bradleyb at fuzziesquirrel.com> wrote:
>
> Hi everyone
>
> Does anyone have plans to provide a secure BMC boot implementation to
> OpenBMC in the 2.7 or 2.8 timeframe?  Just trying to get a feel for who
> all wants to collaborate on this before I submit a design template.
>
> thx - brad



--
Teddy Reed V