{"id":22015,"date":"2022-12-08T18:09:58","date_gmt":"2022-12-08T18:09:58","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2022\/12\/08\/hpe-delivers-on-promise-of-trusted-security-capabilities-for-gen11-server\/"},"modified":"2022-12-08T18:09:58","modified_gmt":"2022-12-08T18:09:58","slug":"hpe-delivers-on-promise-of-trusted-security-capabilities-for-gen11-server","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2022\/12\/08\/hpe-delivers-on-promise-of-trusted-security-capabilities-for-gen11-server\/","title":{"rendered":"HPE delivers on promise of trusted security capabilities for Gen11 server"},"content":{"rendered":"

<\/a>\n
<\/p>\n

\n

Hewlett Packard Enterprise Co.<\/span> made a commitment <\/span>when it introduced its <\/span>HPE ProLiant Gen11 servers<\/span><\/a> in November, which were engineered for the hybrid world to deliver trusted security by design and optimize performance for workloads.<\/span><\/p>\n

The company cites <\/span>various statistics to emphasize its goal<\/span><\/a>: Gen11 added 28 new world records, delivering up to 99% higher performance and 43% more energy efficiency than the previous version.<\/span><\/p>\n

\u201cWhether it\u2019s the performance, whether it\u2019s the power efficiency, whether it\u2019s security, all of those capacities are in this platform,\u201d said <\/span>Kevin Depew (pictured), senior director of future server architecture at HPE. \u201cSecurity is part of our DNA. We put it into the design from the very beginning, and <\/span>we\u2019ve partnered with AMD<\/span><\/a> to deliver what we think is a very compelling story.\u201d<\/span><\/p>\n

Depew spoke with theCUBE industry analyst <\/span>Lisa Martin<\/span><\/a> for a special \u201cHPE ProLiant Gen11 \u2013 Trusted Security by Design\u201d <\/span>launch event<\/span><\/a> during an exclusive broadcast on theCUBE, SiliconANGLE Media\u2019s livestreaming studio. They discussed HPE\u2019s partner ecosystem, how the company is adding value for customers, and why HPE says Gen11 is \u201cfundamental.\u201d <\/span>(* Disclosure below.)<\/span><\/i><\/p>\n

Security as a critical component<\/h3>\n

A good server requires reliability, excellent performance from systems and outstanding power efficiency. HPE has also focused on security, according to Depew, which he referred to as one of the fundamental capabilities of the platform.<\/span><\/p>\n

\u201cWe built on top of capabilities like our <\/span>Silicon Root of Trust<\/span><\/a>, which ensures that the firmware stack on these platforms is not compromised,\u201d he said. \u201cThose continue in this platform and have been expanded on. We have our trusted supply chain, and we\u2019ve expanded on that as well. We have a lot of security capabilities, our platform certificates, our IDE.\u201d<\/span><\/p>\n

HPE has had its Silicon Root of Trust since its Gen10 p<\/span>latforms. This time, it has extended that through its Security Protocol and Data Model, or SPDM, a security capability in servers that uses an open standards-based approach to monitor and authenticate devices securely.<\/span><\/p>\n

The new model<\/h3>\n

HPE saw a problem in the industry regarding the ability to authenticate option cards and other devices in the system.<\/span><\/p>\n

\u201cSilicon Root of Trust verified many pieces of firmware in the platform, but one piece that it wasn\u2019t verifying was the option cards,\u201d Depew said.<\/span><\/p>\n

That posed an issue when HPE realized it could not solve the problem alone because it needed to work with its partners to verify storage option cards, a NIC, or even devices in the future. So, HPE worked with industry standards bodies to create the SPDM specification.<\/span><\/p>\n

\u201cWhat that allows us to do is authenticate the option cards in the systems. So that\u2019s one of our new capabilities that we\u2019ve added in these platforms,\u201d he said. \u201cSo we\u2019ve gone beyond securing all of the things that Silicon Root of Trust secured in the past to extending that to the option cards and their firmware as well.\u201d<\/span><\/p>\n

A partner ecosystem and a value add<\/h3>\n

HPE has since worked with its option card vendors and other industry partners to support SPDM.\u00a0<\/span><\/p>\n

\u201cEverybody agrees that this is a problem that had to be solved. But to solve it, you\u2019ve got to have a partnership,\u201d Depew said.\u00a0<\/span><\/p>\n

To get a method that could authenticate and trust the option cards in the system, HPE was required to work with its option card vendors, using some of the capabilities that it works with some of its processor vendor partners as well.<\/span><\/p>\n

\u201cWorking with partners across the industry, we were able to deliver SPDM so we know that option card, whether it\u2019s a storage card, or a NIC card, or GPUs in the future, those may not be there from day one, but we know that those option cards are what they intended,\u201d Depew said.<\/span><\/p>\n

HPE has also had a longstanding relationship with AMD and has continued to collaborate on a partnership to improve processors and add value for consumers.<\/span><\/p>\n

\u201cThat partnership allows both parties to create better platforms, because we understand what they\u2019re capable of. They understand what our needs are as a server provider,\u201d Depew said. \u201cSo we help them make their processors better, and they help us make our products better.\u201d<\/span><\/p>\n

Here\u2019s theCUBE\u2019s complete video interview with Kevin Depew:<\/span><\/p>\n