On Thursday, 12/17/2015 at 09:08 GMT, Marcy Cortes <[email protected]> wrote: > Do we have TPM chips on z??
No, though the post a couple of weeks ago on this subject raised the interesting idea of using the custom programming capability of the crypto cards to implement a TPM chip (context was POWER, but z has the same capability). Whether TPMs on z are waiting in the wings, I have no idea, but it's probably been a good 10 years since I was involved in discussions about TPMs on z. The problem at the time was virtualizing them at scale. You would potentially want all of your guests to have a TPM. But since aren't allowed to terminate inside the hypervisor to be useful, so they must be outside of VM, and THAT means hardware. Much has happened since then, so don't use my past experience as an indication of future performance. Are TPMs something your software security teams are wanting on z? Alan Altmark Senior Managing z/VM and Linux Consultant Lab Services System z Delivery Practice IBM Systems & Technology Group ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 [email protected] IBM Endicott ---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 ---------------------------------------------------------------------- For more information on Linux on System z, visit http://wiki.linuxvm.org/
