1

I'm kinda unclear and confused ,i'm searching on the subject of trusted module platform and i can resume the main tpm's functions are: authentication functions, integrity measurement functions and attestation functions.

By trust we mean that the platform will behave as excpected. Now as a user who has no idea about the behaviour of the cloud provider (eg:amazon e2c) meaning he doesn't trust it. however there is a trusted third party (which the user and the cloud provider trust) going to request measuerements from the cloud provider ,do operations and then respond to user if the cloud is trusted or not? the TPM now is supposed to be in the cloud part i guess but does it mean every node in the cloud should contain a tpm chip ? and must valid its integrity? then as a user i would trust the cloud provider if all nodes are considered trusted? thanks

closed as unclear what you're asking by forest, ThoriumBR, Xander, Robert Mennell, NULLZ Jun 21 '18 at 4:17

Please clarify your specific problem or add additional details to highlight exactly what you need. As it's currently written, it’s hard to tell exactly what you're asking. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.

  • Do you want a TPM in your cloud? What do you want to achieve? – vidarlo Jun 14 '18 at 17:48
  • @vidarlo how the implementation of the tpm in cloud let the client trust this cloud ? – user180095 Jun 14 '18 at 19:00
  • The TPM would need to be on the underlying host hardware. You can't attest a VM in the same way. – forest Jun 15 '18 at 3:17
  • @forest people.mpi-sws.org/~gummadi/papers/trusted_cloud.pdf like in this paper it says that the tpm should be available in the nodes – user180095 Jun 16 '18 at 10:06