{"id":8980,"date":"2022-01-11T12:00:00","date_gmt":"2022-01-11T12:00:00","guid":{"rendered":"https:\/\/www.telecomstalk.com\/?p=8980"},"modified":"2022-01-11T12:00:00","modified_gmt":"2022-01-11T12:00:00","slug":"dmtf-shares-industry-support-for-its-platform-security-standards","status":"publish","type":"post","link":"https:\/\/www.telecomstalk.com\/?p=8980","title":{"rendered":"DMTF shares industry support for its platform security standards"},"content":{"rendered":"

DMTF<\/a> today announced that its Security Protocol and Data Model (SPDM) specifications have garnered industry support and are actively helping to solve customer and end user concerns with a standardized platform security protocol. Developed by the Security Task Force within the Platform Management Communications Infrastructure Working Group,<\/a> DMTF<\/a> has created the platform security protocol and when implemented properly, SPDM helps ensure a complete chain of trust for the platform.<\/p>\n

\u201cPlatform security is becoming increasingly important and as platform firmware components have become a new area for attacks, DMTF has developed SPDM to address these challenges,\u201d said Jeff Hilland, president of DMTF.<\/p>\n

SPDM defines messages, data objects, and sequences for performing message exchanges between components over a variety of transport and physical media. The description of message exchanges includes authentication of hardware identities, measurement for firmware identities and settings, and session key exchange protocols to enable confidentiality and integrity protected data communication. SPDM enables efficient access to low-level security capabilities and operations.<\/p>\n

By using SPDM, management traffic inside the box over MCTP can be encrypted allowing management data inside the platform to be encrypted, like TLS\/HTTPS encrypts your traffic over the Internet.<\/p>\n

Additionally, SPDM is leveraged by other industry specifications to create a common security framework. SPDM incorporates input from CXL Consortium<\/a>, HDBaseT Alliance<\/a>, MIPI Alliance,<\/a> Open Compute Project<\/a>, PCI-SIG\u00ae,<\/a> Storage Networking Industry Association<\/a>, and the Trusted Computing Group<\/a> through the DMTF Alliance Partner process, to help align component authentication, confidentiality, and integrity objects across the industry. Other mechanisms, including both non-DMTF and DMTF-defined mechanisms, can use SPDM specifications.<\/p>\n

Thus, SPDM is a critical standard that enables the encryption of data and management traffic in flight within any platform adopting these standards.<\/p>\n

Several industry leaders are solving platform security concerns in a common way by utilizing DMTF\u2019s SPDM standards.<\/p>\n

\u201cPlatform, as well as device security, is a top priority for Broadcom<\/a> and it is critical that we enable our SAS storage, PCIe switches, and Ethernet NIC adapters with an industry-leading standardized platform security protocol,\u201d said Jas Tremblay, vice president and general manager, Data Center Solutions Group, Broadcom<\/a>. \u201cBy utilizing DMTF\u2019s SPDM standards, we can provide our customers with attestation and secure boot features for enhanced device authentication and security.\u201d<\/p>\n

\u201cCisco<\/a> is deeply committed to security designed into its platforms and services. As attacks have evolved to become more sophisticated, comprehensive protection of all aspects of hardware & software platforms is essential. Cisco<\/a> has implemented Security Protocol and Data Model (SPDM) to secure UCS products, to provide the hardware authenticity, firmware integrity and protection our customers require & expect. Cisco<\/a> is committed to expanding the use of SPDM across its UCS portfolio,\u201d said Bhaskar Jayakrishnan, Vice President, Cisco<\/a> Cloud & Compute Engineering.<\/p>\n

\u201cInfrastructure platform security is an industry imperative and a key priority for our customers and Dell<\/a> Technologies products. Our support for DMTF\u2019s SPDM standards complements our approach to provide a standardized platform security protocol,\u201d said Paul Perez, chief technology and innovation officer, Dell<\/a> Technologies Infrastructure Solutions Group. \u201cDell<\/a> EMC PowerEdge servers and our HCI platforms feature an enhanced cyber resilient architecture enabled by our iDRAC platform root of trust. Enabling SPDM creates a connection to bring in platform IO devices and extend this architecture.\u201d<\/p>\n

\u201cDMTF\u2019s SPDM is a key security capability in servers for authenticating and securely monitoring devices in an open standards-based approach,\u201d said Krista Satterthwaite, vice president and general manager of Mainstream Compute at Hewlett Packard Enterprise<\/a>. \u201cHPE looks forward to supporting SPDM in our upcoming servers to extend device protection and detection for option cards. The enhancement builds on to HPE\u2019s silicon root of trust technology, and by using HPE Integrated Lights-Out (iLO), allows customers to gain insights from attacks stemming from supply chain, physical or remote attempts.\u201d<\/p>\n

Mark Figley, IBM’s<\/a> Vice President of Modernization and Automation, stated that “IBM servers require the highest level of chain of trust and security, and DMTF’s SPDM standard is a critical technology for the future of IBM’s<\/a> server platform security.”<\/p>\n

\u201cPlatform security is a top priority and by utilizing DMTF\u2019s SPDM 1.2.0 standards we can provide additional benefits and value to our customers and end users by utilizing a standardized platform security protocol,\u201d said Patty Kummrow, Vice President in the Network and Edge Group – Intel<\/a>. \u201cSPDM standards enable a chain of trust for the platform that the industry, customers and end users are demanding.\u201d<\/p>\n

\u201cPlatform security is an absolute imperative and by utilizing DMTF\u2019s SPDM platform standards, we can provide additional benefits to our customers through a standardized platform security protocol,\u201d said Anthony Corkell, VP, Chief Quality and Security Officer, Lenovo<\/a> Infrastructure Solutions Group. \u201cSPDM standard protocols enable security capabilities that help us meet the demands of Lenovo<\/a> customers and the industry at large.\u201d<\/p>\n

\u201cSecurity is non-negotiable and is a top business priority for Positivo Tecnologia<\/a>. Security Protocol and Data Model specifications have several important and beneficial standards that allow companies to offer their customers high security levels,\u201d said Fernando Tavares, Positivo Tecnologia<\/a> Regulatory Engineering Specialist. \u201cThose companies that implement the standards will be steps ahead in the market.\u201d<\/p>\n

\u201cDMTF continues its industry leadership role with the development of the SPDM specifications,\u201d said Arun Kalluri, General Manager, Software Products, Supermicro<\/a>. \u201cSupermicro<\/a> welcomes this standardized approach as the right step forward to mitigate consumers\u2019 security concerns and ensure a strong chain of trust for system platforms. Supermicro<\/a> customers can trust it actively supports the leading security protocols, and we have a strong commitment to open standards on the widest product portfolio.\u201d<\/p>\n

To learn more about the PMCI Working Group and the platform management standards it defines, or to get involved in this work, please visit https:\/\/www.dmtf.org\/standards\/pmci<\/a>. Detailed information on DMTF standards can be found at www.dmtf.org\/standards<\/a>. Those interested in supporting and joining DMTF\u2019s efforts can learn more at www.dmtf.org\/join<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"

DMTF today announced that its Security Protocol and Data Model (SPDM) specifications have garnered industry support and are actively helping to solve customer and end user concerns with a standardized platform security protocol. Developed by the Security Task Force within the Platform Management Communications Infrastructure Working Group, DMTF has created the platform security protocol and […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[],"class_list":["post-8980","post","type-post","status-publish","format-standard","hentry","category-news"],"_links":{"self":[{"href":"https:\/\/www.telecomstalk.com\/index.php?rest_route=\/wp\/v2\/posts\/8980","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.telecomstalk.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.telecomstalk.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.telecomstalk.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.telecomstalk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=8980"}],"version-history":[{"count":0,"href":"https:\/\/www.telecomstalk.com\/index.php?rest_route=\/wp\/v2\/posts\/8980\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.telecomstalk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=8980"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.telecomstalk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=8980"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.telecomstalk.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=8980"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}