Patent ID: 8032942
Filing Date: 2011-10-04
Classification: G06F

Abstract:
1. A non-transitory machine readable storage medium comprising: a plurality of instructions that, in response to being executed by a processor, result in a computing device to perform the functions of: determining whether a configuration policy for a virtual trusted platform module associated with a virtual machine is trusted, including retrieving a hash value of the configuration policy from non-volatile storage of a hardware trusted platform module, computing a hash value of the configuration policy, and determining that the configuration policy is trusted in response to the retrieved hash value corresponding to the computed hash value, determining whether the configuration policy is current, including retrieving from the non-volatile storage a version number for the configuration policy, and determining that the configuration policy is current in response to the retrieved version number matching a version number of the configuration policy, the version number unique from version numbers of previous configuration policies, configuring the virtual trusted platform module associated with the virtual machine per the configuration policy in response to determining that the configuration policy is trusted and current; and launching, via a virtual machine monitor, the virtual machine associated with said virtual trusted platform module.