Edge Microvisor Toolkit Security Considerations

EMT Security Overview

The Edge Microvisor Toolkit Security Overview describes security features used in Edge Microvisor Toolkit to ensure safe and reliable operation, and how to use them.

Enabling Secure Boot for EMT

This guide will teach you how to Enable Secure Boot for Edge Microvisor Toolkit, improving the safety of your edge node.

Security Policy

Intel is committed to rapidly addressing security vulnerabilities affecting our customers and providing clear guidance on the solution, impact, severity and mitigation.

Reporting a Vulnerability

Please report any security vulnerabilities in this project utilizing the guidelines here.

• Enable Secure Boot for Edge Microvisor Toolkit
  • RAW and VHD Image
    • Step 1: Verify your Certificate File
    • Step 2: Convert DER to PEM (if necessary)
    • Step 3: Enroll the Certificate in the UEFI/BIOS
    • Step 4: Enable Secure Boot
  • ISO Image
    • Prerequisites
    • Step 1: Generate Local Signing Certificates
    • Step 2: Rebuild the shim-unsigned Package
    • Step 3: Build the shim Package
    • Step 4: Install the new shim-x64 Package
    • Step 5: Sign the Boot Loader and Kernel
    • Step 6: Enroll KeyInDB into UEFI DB
    • Step 7: Enable Secure Boot and Test
• Edge Microvisor Toolkit Security Overview
  • Secure Boot and Trusted Boot
    • Platform Keys and Image Integrity
  • Immutability
    • Runtime Immutability
    • Protection of the Root Partition at Rest
    • Application Deployment and Data Persistence
    • Mitigating Offline Storage Attacks - dm-verity
  • Full Disc Encryption (FDE)
    • How FDE is Implemented
    • Key Management and Boot Process
    • Protection Against Physical Attacks
  • SELinux