The id and packages showed up with SP4. We have a requirement to have owners of all ids (faceless and human accounts) and to have them secured properly. That was my immediate concern.
Clearly some sort of support has been added if the openCrypto package now pre-reqs it and SUSE packaged it. I don't know enough about it to know if I need it or not! No one has asked for anything, at least not of me. -----Original Message----- From: Linux on 390 Port [mailto:[email protected]] On Behalf Of Alan Altmark Sent: Thursday, December 17, 2015 4:18 PM To: [email protected] Subject: Re: [LINUX-390] TPM chip on z? On Thursday, 12/17/2015 at 09:08 GMT, Marcy Cortes <[email protected]> wrote: > Do we have TPM chips on z?? No, though the post a couple of weeks ago on this subject raised the interesting idea of using the custom programming capability of the crypto cards to implement a TPM chip (context was POWER, but z has the same capability). Whether TPMs on z are waiting in the wings, I have no idea, but it's probably been a good 10 years since I was involved in discussions about TPMs on z. The problem at the time was virtualizing them at scale. You would potentially want all of your guests to have a TPM. But since aren't allowed to terminate inside the hypervisor to be useful, so they must be outside of VM, and THAT means hardware. Much has happened since then, so don't use my past experience as an indication of future performance. Are TPMs something your software security teams are wanting on z? Alan Altmark Senior Managing z/VM and Linux Consultant Lab Services System z Delivery Practice IBM Systems & Technology Group ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 [email protected] IBM Endicott ---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 ---------------------------------------------------------------------- For more information on Linux on System z, visit http://wiki.linuxvm.org/ ---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 ---------------------------------------------------------------------- For more information on Linux on System z, visit http://wiki.linuxvm.org/
