Patent ID: 11893410
Assignee: VMWARE LLC
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 10:
11. A virtualized computing system, comprising:
a host cluster and a virtualization management server each connected to a network, wherein the host cluster includes hosts and a virtualization layer executing on hardware platforms of the hosts, and wherein a trust authority is configured to run on a processor of the virtualization management server and is configured to perform secure attestation of a workload deployed in the host cluster by:
generating a hash of at least a portion of an image of a virtual machine (VM) managed by the virtualization layer, and then storing a pre-defined attestation report that includes the hash generated by the trust authority;
receiving, from a security module of a host in which the VM executes, an attestation report that the security module generated by hashing at least a portion of the image, wherein a portion of the image is encrypted; and
determining a match between the received attestation report and the pre-defined attestation report, and then transmitting to the security module, a secret that is acquired from a key management service and used by the VM to access information from the encrypted portion of the image.