ProvenRun has already developed a Proof-of-Concept (PoC) to demonstrate how ProvenCore, ProvenRun’s ultra-secure microkernel, can be used to secure an HPC Baseboard Management Controller (BMC). As part of the E2CC project, a complete industrialisation of the PoC will be conducted in order to integrate the ProvenCore’s BMC secure solution in the Atos Edge and HPC line of server products.
Leveraging on this integration, the chain of trust will be extended beyond the BMC to address the other processing units (CPU and GPU). The certification of the BMC chain of trust implementation will be prepared. A firmware attestation mechanism, a keystore service and a TPM integration or emulation will be developed.
In addition, ProvenRun will investigate how ProvenCore could be used on servers to implement isolated and highly secured execution enclaves, functionally equivalent to AWS Nitro enclaves.