Editing Networking/Summit-2017-03 (section)

=== 1130 - ONIE with Secure Boot ===
Network security and validating the software running on data center systems has never been more important.
The central components for launching trusted operating system environments are the family of technologies described by the Universal Extensible Firmware Interface (UEFI) Secure Boot and the Trusted Computer Group (TCG) Trusted Platform Module (TPM) specifications. This talk discusses the plans of the Open Network Install Environment (ONIE) boot loader project to address the challenges of deploying secure technologies on network switches. The goal is to combine the easy to use image discovery features of ONIE with the industry standard security components of UEFI and TCG. The benefits are:

* Maintains the established image discovery methods of ONIE
* Build on industry standard specifications and technologies
* Support for x86_64 and AARCH64 UEFI firmwares
* Enables all UEFI capabilities 

* Curt Brune, Cumulus Networks

[[https://youtu.be/R-r8vBavRQ0 video]], [[http://files.opencompute.org/oc/public.php?service=files&t=9dabbbc1f41d51e284ec15f82ace9198 slides]]