Hardware Security

Question 1

TPM

Answer 1

Trusted Platform Module
Physical chip installed on a motherboard that acts as a hardware root of trust
Manages cryptographic keys and ensures secure system boot

Question 2

vTPMs

Answer 2

Virtual TPM
Managed via platforms like VMWare or Microsoft Hyper-V
Allow virtual instances to maintain individual security postures

Question 3

HSM

Answer 3

Hardware Security Module
Dedicated hardware root of trust managing cryptographic keys and performing cryptographic operations across machines in an enterprise
Centralized, secure key management

Question 4

Secure Boot

Answer 4

Ensures that each component loaded during the boot process has a valid digital signature

Question 5

Measured Boot

Answer 5

Records cryptographic hashes of each component loaded during the boot process into a TPM to create a verifiable log of the boot sequence
Does not block software, but provides visibility into what has loaded

Question 6

UEFI

Answer 6

Extensible Firmware Interface
Modern type of system firmware that offers advanced features such as a graphical user interface, mouse support during boot, and improved security compare to BIOS

Question 7

Secure Boot’s three key verifications

Answer 7

1) UEFI/OS Loader integrity
2) Windows boot component integrity
3) Boot-critical driver integrity