Patent ID: 8694786
Filing Date: 2014-04-08
Classification: G06F,H04L

Abstract:
1. A method for storing a customized virtual machine, the method comprising: configuring a host machine to a desired state, wherein the host machine has a trusted platform module; recording a platform configuration register state based on the desired state; forming a sealed blob from a private key and a platform configuration register state to verify whether the virtual machine can be executed; receiving a customer's symmetric key at a data center; encrypting the customer's symmetric key with a public key of the data center to form a wrapped customer's symmetric key; storing the wrapped customer's symmetric key; provisioning a virtual machine on the host machine, wherein the virtual machine is selected from a catalog of stock virtual machines; instantiating the virtual machine on the host machine; configuring the virtual machine, based on customer inputs, to form a customer's configured virtual machine; creating an image from the customer's configured virtual machine; unwrapping the wrapped customer's symmetric key to form a copy of the customer's symmetric key; encrypting the customer's configured virtual machine with the copy of the customer's symmetric key to form an encrypted configured virtual machine; and storing the encrypted configured virtual machine to non-volatile storage.