Intel(R) Trusted Execution Technology (Intel TXT) is a new security technology that started appearing on Intel server platforms in 2010. This book explains Intel Trusted Execution Technology for Servers, its purpose, application, advantages, and limitations. This book guides the server administrator / data center manager in enabling the technology as well as establishing a launch control policy that he can use to customize the server's boot process to fit the data center's requirements.
This book explains how the OS (typically a Virtual Machine Monitor or Hypervisor) and supporting software can build on the secure facilities afforded by Intel TXT to provide additional security features and functions. It provides examples how the data center can create and use trusted pools. What you'll learn First it explains why TXT is important and the underlying principles (why it is effective). Next it explains how to enable and provision TXT and then explain Launch Control Policy how to create a policy, discuss trade-offs in determining the right policy for the data center, and walk the reader through the process for establishing the policy.