Server Masters: AMD Security

Technical Sales
 Learning objectives

This course has been designed to help you:

– OM Encryption Key compatibility
– TPM
– Secure Memory Encryption
– Secure Encrypted Virtualization

2 © Copyright 2018 Dell Inc

Internal Use - Confidential
Integrated Security
 Robust end-to-end integrated security
Protect Reduce the risks of securing data across their data center
data at rest with OpenManage Secure Enterprise Key Manager 1

Protect each VM by isolating the guests and the

Integrated hypervisor with AMD Secure Encrypted Virtualization
security (SEV)
Protect data by using a single key to encrypt the system
memory with AMD Secure Memory Encryption (SME)

Detect and remediate unauthorized or malicious change with drift

Drift detection &
detection and system lockdown with OpenManage Enterprise and
System lockdown
iDRAC9

1. OpenManage Secure Enterprise Key Manager will be available on R6515 and R7515 in December 2019
4 © Copyright 2018 Dell Inc
Internal Use - Confidential
 iDRAC management

5 © Copyright 2018 Dell Inc

Internal Use - Confidential
 Security: TPM plug-in module
Front
TPM 1.2 and 2.0 offered at RTS
All 3 modules offered after-point-of-sale

TPM 1.2 Nuvoton FIPS-CC-TCG CMD3M

TPM 2.0 Nuvoton FIPS-CC-TCG 1MW70

TPM 2.0 NationZ WFD8R Back

Different motherboard connector

Previous generation modules cannot
be used in current platforms

6 © Copyright 2018 Dell Inc

Internal Use - Confidential
 Protecting data every moment in every layer
PowerEdge Servers

VM VM VM Uses one key per virtual machine to

Secure Encrypted Virtualization (SEV) isolate guests and the hypervisor from
one another

Hypervisor / OS

BIOS and Firmware

Platform Design
Memory
Secure Memory Encryption (SME) AMD Uses a single key to encrypt system
memory

iDRAC …

OpenManage Secure Enterprise Key Manager 1 Centralized key management for

OpenManage Secure Enterprise
data protection
Key Manager and iDRAC9
7 © Copyright 2018 Dell Inc
Internal Use - Confidential 1. OpenManage Secure Enterprise Key Manager will be available on R6515 and R7515 in December 2019
 Thank you
8
Internal Use - Confidential