AMI TruE™ Trusted Environment

Home » Products » Security Services and Solutions » AMI TruE™ Trusted Environment

Trust in Your Data Center Comply with Data Sovereignty Attest New Server Installations Run Sensitive Workloads on Trusted Servers Extensible Solution with RESTful API

AMI^® TruE^™ Trusted Environment

With more than 35 years as the leader in BIOS/BMC firmware development, AMI® leverages its deep understanding in firmware to bring a suite of trusted firmware security products to enterprise clients and data center operators.

The need to secure firmware is growing at an exponential rate according to NIST, the National Institute of Standards and Testing. This is a result of the amount of firmware in the data center increasing over the years as platforms become more complex and components require their own firmware. With security issues becoming more common at the firmware level, organizations must be able to assure the integrity of their platform firmware. AMI TruE™ delivers holistic data center security solutions using Intel® Security Technologies and Intel® Security Libraries for Data Centers to provide a Trusted Environment for cloud execution.

Features and Benefits

TRUST IN YOUR DATA CENTER - Establish and track the trust status of all compute servers in the data center.
COMPLY WITH DATA SOVEREIGNTY - Ensure seamless compliance with various regional data sovereignty regulations.
ATTEST NEW SERVER INSTALLATIONS - Avoid supply chain attacks and other physical tampering.

RUN SENSITIVE WORKLOADS ON TRUSTED SERVERS - Ensure workloads containing sensitive information run only on trusted nodes with KUBERNETES® integration.
EXTENSIBLE SOLUTION WITH RESTFUL API - Elect to use AMI TruE out-of-the-box or integrate AMI TruE with your existing data center management infrastructure.

Platform Trust

AMI TruE uses a trust agent running at the OS level to collect firmware and software hash information from the Trusted Platform Module (TPM), which is used to determine platform trust by comparing this hash information to known trusted hashes. A customer installed and managed attestation server will keep all the various hashes collected across the data center and track which ones are trusted or untrusted. When a node is found to be untrusted, it can be scheduled for automatic firmware updates based upon data center policy.

Privacy and Data Sovereignty

AMI TruE enables data centers and businesses the ability to comply with privacy laws and data sovereignty regulations by binding the server's geographic location to its asset tag information – creating what is called a geo-tag. With AMI TruE, protected personal data can be identified and separated, and compliance with data sovereignty regulations, such as the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), can be assured.

Customization with Flavors

Combine platform requirements in any combination to create flavors. Flavors help determine whether a particular compute node is suitable for certain workloads. Apply one or more flavors to any subset of your managed environment to enforce platform trust requirements, operating system requirements, geographic location requirements, and more. AMI TruE even gives you the ability to create custom attributes for your flavors.

Integration with Cloud Orchestration

By assuring that your environment is running only trusted firmware and software, integration with popular industry cloud orchestration software, such as KUBERNETES®, allows AMI TruE to ensure that workloads containing sensitive information or data requiring data sovereignty compliance are run only on trusted compute nodes in the required geographic location. KUBERNETES® integration allows for the enforcement of flavors to be automated by the data center workload orchestration environment.

Designed with Extensibility in Mind

While AMI TruE comes as an extension to our AMI Composer™ data center management software for an out-of-the-box product, it uses RESTful APIs for ease of integration into other data center management environments.

End-to-End Security with AMI TruE

AMI TruE helps data centers secure platforms throughout the entire product life cycle. Supply chain attacks can be easily avoided by attesting the shipped firmware and software hash information with the attestation server upon installation into an existing trusted environment. After deployment, server trust validation continues to attest the integrity of the firmware and software running throughout the data center.

Download the NISTIR 8320 Report on Hardware-Enabled Security: Container Platform Security Prototype

Please visit the National Institute of Standards and Technology (NIST) Computer Security Resource Center (CSCR) Publication site to download the NISTIR 8320 (PUBLIC DRAFT) Report on Hardware-Enabled Security: Container Platform Security Prototype.

Download the NISTIR 8320 (Public Draft) Report on Hardware-Enabled Security: Container Platform Security Prototype

AMI TruE Data Sheet

1 file(s) 307.85 KB

Download

Contact Us

For more information, please contact an AMI Sales Representative using the form below.

Name *

First

Last

Company/Organization Name *

Email *

Phone Number *

Country *

Regarding *

Comment or Message *

Connect Partner Develop Power on Manage Be Secure with AMI

Powering Managing Securing the World's Connected Digital Infrastructure

Founded in 1985 and known worldwide for AMIBIOS®, the mission of AMI is to power, manage and secure the world’s connected digital infrastructure by providing best-in-class UEFI and remote management firmware, security solutions, development tools and utilities to top-tier manufacturers of desktop, server, mobile and embedded/IoT systems.