Unlocking Security: The Truth About HW Root of Trust with Russell Doty & Javier Martinez Canillas 🔒

Secure systems are built on a layered model. You ultimately have to trust something - but what? TPM 2.0 is a Hardware RoT (Root of Trust), including the TPM 2.0 module, the TCG Software Stack (TSS), operations it can perform, and userspace tools that simplify using TPM 2.0. We also cover the TPM 2.0 Resource Manager, a new feature that is critical to enabling multiple users and applications to use the TPM. In addition we will go over the implementation of TPM in Fedora and RHEL. We will demo TPM using Clevis to automatically unlock an encrypted root volume on boot with the master key secured by TPM. Beyond Clevis we will explore other uses of TPM 2.0 including Trusted Boot, secure systems identity, protected keyring, and protected certificates.