| /openbmc/qemu/docs/specs/ |
| H A D | spdm.rst | 2 QEMU Security Protocols and Data Models (SPDM) Support
5 SPDM enables authentication, attestation and key exchange to assist in
9 QEMU supports connecting to a SPDM responder implementation. This allows an
10 external application to emulate the SPDM responder logic for an SPDM device.
12 Setting up a SPDM server
15 When using QEMU with SPDM devices QEMU will connect to a server which
16 implements the SPDM functionality.
18 SPDM-Utils
21 You can use `SPDM Utils`_ to emulate a responder. This is the simplest method.
23 SPDM-Utils is a Linux applications to manage, test and develop devices
[all …]
|
| H A D | index.rst | 32 spdm
|
| /openbmc/docs/designs/ |
| H A D | redfish-spdm-attestation.md | 1 # Redfish SPDM Attestation Support
13 allows users to use [SPDM](https://www.dmtf.org/standards/spdm) or
16 It would be useful to add SPDM attestation support in BMCWeb, which provides
18 generic implementation for the SPDM D-Bus Daemon.
20 This design focuses on SPDM.
24 SPDM (Security Protocols and Data Models) is a spec published by
28 implementation of the SPDM protocol. Redfish Schema
30 adds support for doing SPDM-based device attestation over Redfish API.
34 This feature aims at supporting SPDM attestation through Redfish API and
43 - Design for SPDM Attestation D-Bus Daemon, demonstrating how to fetch the
[all …]
|
| /openbmc/bmcweb/redfish-core/schema/dmtf/json-schema/ |
| H A D | ComponentIntegrity.v1_3_0.json | 156 …SPDM`, a value of `false` shall prohibit the SPDM Requester from using SPDM to communicate with th…
168 …ng. If `ComponentIntegrityType` contains `SPDM`, this property shall contain the negotiated or se…
211 "SPDM": { object
213 … "description": "Integrity information about the SPDM Responder as reported by an SPDM Requester.",
214 …SPDM Responder identified by the `TargetComponentURI` property as reported by an SPDM Requester. …
229 … `ComponentIntegrityType` contains `SPDM`, this property shall contain a URI to the resource that …
247 "SPDM",
255 "SPDM": "Security Protocol and Data Model (SPDM) protocol.", string
262 …"SPDM": "This value shall indicate the integrity information is obtained through the Security Prot… string
371 …ption": "This action generates an SPDM cryptographic signed statement over the given nonce and mea…
[all …]
|
| H A D | SecurityPolicy.v1_0_3.json | 57 "description": "The SPDM algorithm settings.",
58 "longDescription": "This object shall contain SPDM algorithm settings.",
115 "description": "The SPDM policy settings.",
116 "longDescription": "This object shall contain SPDM policy settings.",
134 "description": "The SPDM algorithms.",
135 "longDescription": "This property shall contain the SPDM algorithms."
138 "description": "The SPDM versions.",
145 …"longDescription": "This property shall contain an array of SPDM versions. An array containing on…
155 "description": "SPDM policy settings.",
156 "longDescription": "This object shall contain SPDM policy settings.",
[all …]
|
| H A D | Certificate.v1_9_0.json | 181 "SPDM": { object
182 "$ref": "#/definitions/SPDM",
183 "description": "SPDM-related information for the certificate.",
184 …of this property shall contain SPDM-related information for the certificate. This property shall …
261 …"This certificate is a device type certificate like those associated with SPDM and other standards…
267 …his certificate is a platform type certificate like those associated with SPDM and other standards…
664 "SPDM": { object
666 "description": "SPDM-related information for a certificate.",
667 … "longDescription": "This type shall contain SPDM-related information for a certificate.",
685 …er between 0 and 7, inclusive, that represents the slot identifier for an SPDM-provided certificat…
|
| H A D | CertificateCollection.json | 163 "/redfish/v1/Managers/{ManagerId}/SecurityPolicy/SPDM/TrustedCertificates",
164 "/redfish/v1/Managers/{ManagerId}/SecurityPolicy/SPDM/RevokedCertificates",
|
| /openbmc/bmcweb/redfish-core/schema/dmtf/json-schema-installed/ |
| H A D | ComponentIntegrity.v1_3_0.json | 156 …SPDM`, a value of `false` shall prohibit the SPDM Requester from using SPDM to communicate with th…
168 …ng. If `ComponentIntegrityType` contains `SPDM`, this property shall contain the negotiated or se…
211 "SPDM": { object
213 … "description": "Integrity information about the SPDM Responder as reported by an SPDM Requester.",
214 …SPDM Responder identified by the `TargetComponentURI` property as reported by an SPDM Requester. …
229 … `ComponentIntegrityType` contains `SPDM`, this property shall contain a URI to the resource that …
247 "SPDM",
255 "SPDM": "Security Protocol and Data Model (SPDM) protocol.", string
262 …"SPDM": "This value shall indicate the integrity information is obtained through the Security Prot… string
371 …ption": "This action generates an SPDM cryptographic signed statement over the given nonce and mea…
[all …]
|
| H A D | Certificate.v1_9_0.json | 181 "SPDM": { object
182 "$ref": "#/definitions/SPDM",
183 "description": "SPDM-related information for the certificate.",
184 …of this property shall contain SPDM-related information for the certificate. This property shall …
261 …"This certificate is a device type certificate like those associated with SPDM and other standards…
267 …his certificate is a platform type certificate like those associated with SPDM and other standards…
664 "SPDM": { object
666 "description": "SPDM-related information for a certificate.",
667 … "longDescription": "This type shall contain SPDM-related information for a certificate.",
685 …er between 0 and 7, inclusive, that represents the slot identifier for an SPDM-provided certificat…
|
| H A D | CertificateCollection.json | 163 "/redfish/v1/Managers/{ManagerId}/SecurityPolicy/SPDM/TrustedCertificates",
164 "/redfish/v1/Managers/{ManagerId}/SecurityPolicy/SPDM/RevokedCertificates",
|
| /openbmc/bmcweb/redfish-core/schema/dmtf/csdl/ |
| H A D | ComponentIntegrity_v1.xml | 64 … String="This action generates an SPDM cryptographic signed statement over the given nonce and mea…
65 …SPDM Responder. This action shall not be present if the `ComponentIntegrityType` property does no…
69 …SPDM Requester shall generate the nonce. The value should be unique and generated using a random …
74 …SPDM slot identifier for the certificate containing the private key to generate the signature over…
138 …ng. If `ComponentIntegrityType` contains `SPDM`, this property shall contain the negotiated or se…
144 …SPDM`, a value of `false` shall prohibit the SPDM Requester from using SPDM to communicate with th…
149 … `ComponentIntegrityType` contains `SPDM`, this property shall contain a URI to the resource that …
162 <Property Name="SPDM" Type="ComponentIntegrity.v1_0_0.SPDMinfo" Nullable="false">
163 …Data.Description" String="Integrity information about the SPDM Responder as reported by an SPDM Re…
164 …SPDM Responder identified by the `TargetComponentURI` property as reported by an SPDM Requester. …
[all …]
|
| H A D | SecurityPolicy_v1.xml | 82 <Property Name="SPDM" Type="SecurityPolicy.v1_0_0.SPDMPolicy" Nullable="false">
83 <Annotation Term="OData.Description" String="The SPDM policy."/>
84 …cription" String="This property shall contain the policy requirements for SPDM communication and u…
110 <Annotation Term="OData.Description" String="SPDM policy settings."/>
111 …<Annotation Term="OData.LongDescription" String="This object shall contain SPDM policy settings."/>
114 …<Annotation Term="OData.Description" String="An indication of whether SPDM communication with devi…
115 …Term="OData.LongDescription" String="This property shall indicate whether SPDM communication with …
119 …<Annotation Term="OData.Description" String="An indication of whether SPDM secure sessions with de…
120 …Term="OData.LongDescription" String="This property shall indicate whether SPDM secure sessions wit…
124 …<Annotation Term="OData.Description" String="An indication of whether SPDM extended algorithms are…
[all …]
|
| H A D | Certificate_v1.xml | 126 …<String>/redfish/v1/Managers/{ManagerId}/SecurityPolicy/SPDM/TrustedCertificates/{CertificateId}</…
127 …<String>/redfish/v1/Managers/{ManagerId}/SecurityPolicy/SPDM/RevokedCertificates/{CertificateId}</…
656 …"This certificate is a device type certificate like those associated with SPDM and other standards…
659 …his certificate is a platform type certificate like those associated with SPDM and other standards…
751 <Property Name="SPDM" Type="Certificate.v1_5_0.SPDM" Nullable="false">
752 … <Annotation Term="OData.Description" String="SPDM-related information for the certificate."/>
753 …of this property shall contain SPDM-related information for the certificate. This property shall …
757 <ComplexType Name="SPDM">
759 <Annotation Term="OData.Description" String="SPDM-related information for a certificate."/>
760 …<Annotation Term="OData.LongDescription" String="This type shall contain SPDM-related information …
[all …]
|
| /openbmc/bmcweb/redfish-core/schema/dmtf/installed/ |
| H A D | ComponentIntegrity_v1.xml | 64 … String="This action generates an SPDM cryptographic signed statement over the given nonce and mea…
65 …SPDM Responder. This action shall not be present if the `ComponentIntegrityType` property does no…
69 …SPDM Requester shall generate the nonce. The value should be unique and generated using a random …
74 …SPDM slot identifier for the certificate containing the private key to generate the signature over…
138 …ng. If `ComponentIntegrityType` contains `SPDM`, this property shall contain the negotiated or se…
144 …SPDM`, a value of `false` shall prohibit the SPDM Requester from using SPDM to communicate with th…
149 … `ComponentIntegrityType` contains `SPDM`, this property shall contain a URI to the resource that …
162 <Property Name="SPDM" Type="ComponentIntegrity.v1_0_0.SPDMinfo" Nullable="false">
163 …Data.Description" String="Integrity information about the SPDM Responder as reported by an SPDM Re…
164 …SPDM Responder identified by the `TargetComponentURI` property as reported by an SPDM Requester. …
[all …]
|
| H A D | Certificate_v1.xml | 126 …<String>/redfish/v1/Managers/{ManagerId}/SecurityPolicy/SPDM/TrustedCertificates/{CertificateId}</…
127 …<String>/redfish/v1/Managers/{ManagerId}/SecurityPolicy/SPDM/RevokedCertificates/{CertificateId}</…
656 …"This certificate is a device type certificate like those associated with SPDM and other standards…
659 …his certificate is a platform type certificate like those associated with SPDM and other standards…
751 <Property Name="SPDM" Type="Certificate.v1_5_0.SPDM" Nullable="false">
752 … <Annotation Term="OData.Description" String="SPDM-related information for the certificate."/>
753 …of this property shall contain SPDM-related information for the certificate. This property shall …
757 <ComplexType Name="SPDM">
759 <Annotation Term="OData.Description" String="SPDM-related information for a certificate."/>
760 …<Annotation Term="OData.LongDescription" String="This type shall contain SPDM-related information …
[all …]
|
| /openbmc/phosphor-dbus-interfaces/yaml/xyz/openbmc_project/Attestation/ |
| H A D | MeasurementSet.interface.yaml | 2 Implement to represent properties related to SPDM Measurements set.
7 This method generates an SPDM cryptographic signed statement over the
8 given nonce and measurements of the SPDM Responder.
33 Certificate corresponding to the SPDM slot identifier that can
58 The SPDM version used by the SPDM Responder to generate the
|
| H A D | ComponentIntegrity.interface.yaml | 5 using a security protocol (e.g., SPDM).
29 "1.1" for SPDM.
66 OEM-specific. If it is neither SPDM nor TPM, tag it OEM.
67 - name: SPDM
69 Security Protocol and Data Model (SPDM) protocol.
|
| H A D | IdentityAuthentication.interface.yaml | 3 SPDM protocol.
|
| /openbmc/qemu/include/sysemu/ |
| H A D | spdm-socket.h | 2 * QEMU SPDM socket support
27 * spdm_socket_connect: connect to an external SPDM socket
31 * This will connect to an external SPDM socket server. On error
38 * spdm_socket_rsp: send and receive a message to a SPDM server
46 * Send platform data to a SPDM server on socket and then receive
|
| /openbmc/bmcweb/redfish-core/include/generated/enums/ |
| H A D | component_integrity.hpp | 12 SPDM, enumerator
56 {ComponentIntegrityType::SPDM, "SPDM"},
|
| /openbmc/qemu/backends/ |
| H A D | spdm-socket.c | 3 * QEMU SPDM socket support
6 …* https://github.com/DMTF/spdm-emu/blob/07c0a838bcc1c6207c656ac75885c0603e344b6f/spdm_emu/spdm_emu…
14 #include "sysemu/spdm-socket.h"
|
| H A D | meson.build | 36 system_ss.add(when: 'CONFIG_SPDM_SOCKET', if_true: files('spdm-socket.c'))
|
| /openbmc/phosphor-dbus-interfaces/yaml/xyz/openbmc_project/MCTP/ |
| H A D | Endpoint.interface.yaml | 37 MCTP(0x04) and SPDM over MCTP(0x05). There are ranges for vendor
|
| H A D | README.md | 5 protocols (like PLDM, SPDM) which are implemented in the userspace. Application
|
| /openbmc/qemu/include/hw/pci/ |
| H A D | pcie_doe.h | 112 /* Used for spdm-socket */
|