<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, Sans-Serif;font-size:13px"><div class="" style="">Hyder,</div><div class="" style="">ps[Tell us the Use case what exactly are you trying to solve]</div><div style="color: rgb(0, 0, 0); font-size: 13px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; font-style: normal; background-color: transparent;" class=""><br class="" style=""></div><div style="color: rgb(0, 0, 0); font-size: 13px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; font-style: normal; background-color: transparent;" class="">Otherwise, in order to build chain of trust, you can use cryptography concept of building a rootCA, and creating chain of certificate</div><div style="color: rgb(0, 0, 0); font-size: 13px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica,
Arial, 'Lucida Grande', sans-serif; font-style: normal; background-color: transparent;" class="">This is part of PKI infrastructure,where digital certificates are verified using a chain of trust</div><div style="color: rgb(0, 0, 0); font-size: 13px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; font-style: normal; background-color: transparent;" class="">--</div><div style="color: rgb(0, 0, 0); font-size: 13px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; font-style: normal; background-color: transparent;" class="">Anish</div><div style="color: rgb(0, 0, 0); font-size: 13px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; font-style: normal; background-color: transparent;" class=""><br class="" style=""></div> <div class="qtdSeparateBR"><br><br></div><div class="yahoo_quoted" style="display: block;"> <div
style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, Sans-Serif; font-size: 13px;" class=""> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, Sans-Serif; font-size: 12px;" class=""> <div dir="ltr" class="" style=""> <font size="2" face="Arial" class="" style=""> On Monday, 27 October 2014 2:42 PM, "Clark, Robert Graham" <robert.clark@hp.com> wrote:<br class="" style=""> </font> </div> <br class="" style=""><br class="" style=""> <div class="" style=""><div id="yiv0743766612" class="" style=""><style class="" style="">#yiv0743766612 #yiv0743766612 --
_filtered #yiv0743766612 {font-family:Calibri;panose-1:2 15 5 2 2 2 4 3 2 4;}
#yiv0743766612
#yiv0743766612 p.yiv0743766612MsoNormal, #yiv0743766612 li.yiv0743766612MsoNormal, #yiv0743766612 div.yiv0743766612MsoNormal
{margin:0cm;margin-bottom:.0001pt;font-size:12.0pt;}
#yiv0743766612 a:link, #yiv0743766612 span.yiv0743766612MsoHyperlink
{color:#0563C1;text-decoration:underline;}
#yiv0743766612 a:visited, #yiv0743766612 span.yiv0743766612MsoHyperlinkFollowed
{color:#954F72;text-decoration:underline;}
#yiv0743766612 span.yiv0743766612EmailStyle17
{color:#1F497D;}
#yiv0743766612 .yiv0743766612MsoChpDefault
{}
_filtered #yiv0743766612 {margin:72.0pt 72.0pt 72.0pt 72.0pt;}
#yiv0743766612 div.yiv0743766612WordSection1
{}
#yiv0743766612 </style><div class="" style=""><div class="" style=""><div class="" style=""><span style="font-size:11.0pt;" class="">Hi Faraz,</span></div><div class="" style=""><span style="font-size:11.0pt;" class=""> </span></div><div class="" style=""><span style="font-size:11.0pt;" class="">We can likely help you more if you provide a little bit more background.</span></div><div class="" style=""><span style="font-size:11.0pt;" class=""> </span></div><div class="" style=""><span style="font-size:11.0pt;" class="">Have you taken a look at the OpenStack Security Guide <a rel="nofollow" shape="rect" target="_blank" href="http://docs.openstack.org/sec/" class="" style="">http://docs.openstack.org/sec/</a> ? That touches on a number of related topics, we’ve also got several people in the group who are very familiar with trusted computing who I’m sure will reply to this thread.</span></div><div class="" style=""><span
style="font-size:11.0pt;" class=""> </span></div><div class="" style=""><span style="font-size:11.0pt;" class="">-Rob</span></div><div class="" style=""><span style="font-size:11.0pt;" class=""> </span></div><div class="" id="yiv0743766612yqt52266" style=""><div style="border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt;" class=""><div class="" style=""><div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm;" class=""><div class="" style=""><b class="" style=""><span lang="EN-US" style="font-size:11.0pt;" class="">From:</span></b><span lang="EN-US" style="font-size:11.0pt;" class=""> Muhammad Faraz Hyder [mailto:farazhyder55@gmail.com] <br clear="none" class="" style=""><b class="" style="">Sent:</b> 27 October 2014 05:43<br clear="none" class="" style=""><b class="" style="">To:</b> openstack-security@lists.openstack.org<br clear="none" class="" style=""><b class="" style="">Subject:</b>
[Openstack-security] Help regarding Chain of Trust implementation in Openstack cloud.</span></div></div></div><div class="" style=""> </div><div class="" style=""><div class="" style=""><div class="" style="">Hi, </div></div><div class="" style=""><div class="" style=""> </div></div><div class="" style="">I need help regarding the implementation of Trust in openstack cloud. I have gone through the TPM based implementation and Open attestation provided by Intel. </div><div class="" style=""><div class="" style=""> </div></div><div class="" style=""><div class="" style="">But, what i am trying to implement is some non-vendor /non- hardware dependent solution.</div></div><div class="" style=""><div class="" style=""> </div></div><div class="" style=""><div class="" style="">Is PKI could be good idea for the implementation of Chain of Trust?. Please guide me in this regard, as I am still unable to come up with right idea
for the implementation. </div></div><div class="" style=""><div class="" style=""> </div></div><div class="" style=""><div class="" style=""> </div></div><div class="" style=""><div class="" style="">Regards, </div></div><div class="" style=""><div class="" style="">Faraz </div></div></div></div></div></div></div></div><br class="" style=""><div class="" id="yqt75923" style="">_______________________________________________<br clear="none" class="" style="">Openstack-security mailing list<br clear="none" class="" style=""><a shape="rect" ymailto="mailto:Openstack-security@lists.openstack.org" href="mailto:Openstack-security@lists.openstack.org" class="" style="">Openstack-security@lists.openstack.org</a><br clear="none" class="" style=""><a shape="rect" href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-security" target="_blank" class=""
style="">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-security</a><br clear="none" class="" style=""></div><br class="" style=""><br class="" style=""></div> </div> </div> </div> </div></body></html>