Patent ID: 8060876
Filing Date: 2011-11-15
Classification: G06F

Abstract:
1. A method for isolating a virtual trusted platform module (vTPM) manager in a processing system from other management software in the processing system, the method comprising: launching a virtual machine monitor (VMM) in the processing system, the VMM to include a memory-mapped input/output (MMIO) trap; launching a vTPM manager in a first virtual machine (VM) in a processing system; launching a second VM to contain virtual machine management programs other than the vTPM manager and the MMIO trap; and launching a service operating system (OS) in a third VM in the processing system, launching a user OS in a fourth VM in the processing system, instantiating a first vTPM for use by the service OS of the third VM, instantiating a second vTPM for use by the user OS of the fourth VM, intercepting, by the VMM, an operation of the service OS involving the first vTPM, and using the vTPM manager in the first VM to process the operation of the service OS involving the first vTPM.