3 ms·
Well, the security key of VM is stored in the CPU, so you can't replace CPU unless you can enter the console, copy the data out and re-encrypt it with key from
by mmis1000 6y ago
Well, the security key of VM is stored in the CPU, so you can't replace CPU unless you can enter the console, copy the data out and re-encrypt it with key from another CPU.
While if you can do this, you don't need to replace mother board/CPU anyway because you already pwned them and copy/modify the data whatever you want.
- Dylan16807 6y ago> Well, the security key of VM is stored in the CPU What security key? Do you mean the memory encryption key? We're talking about a powered off machine, so that's irrelevant.
- SaltySolomon 6y agoMemory and Virtual Machines
- Dylan16807 6y agoPlease explain better. The article talks about virtual machines as a subset of memory encryption. It also specifically says "ephemeral keys". Not ones that would be preserved across a shutdown. What is encrypted on a powered-off server that the CPU knows the key to?
- mmis1000 6y agoI mean keys stored in cpu ftpm. So next time it boot, it can't get the disk decrypted with the key in the cpu. And the admin will notice something very incorrectly happened.