3 ms·
And how do you trust the identity of the new server/instance during boot strapping?
by donavanm 12y ago
And how do you trust the identity of the new server/instance during boot strapping?
- 0x44 12y agoYou could leverage the TPM and some version of remote attestation and only permit key-requests from attested machines. Alternatively (or concurrently), you could PXE boot all devices with a parameterized shared-secret individualized for each node.