Silicon Root of Trust
What is Silicon Root of Trust?
Silicon Root of Trust is firmware technology that integrates security directly into the hardware level of HPE servers, making an immutable fingerprint in the silicon that provides advanced levels of protection against firmware attacks. It detects changes being introduced by cyber attackers and disables the server, so malicious code never penetrates and allows operation to quickly regain its original state.
HPE and Silicon Root of Trust
Protect your enterprise with the latest in firmware protection, malware detection, and firmware recovery—right down to the silicon. HPE protects you across attack vectors with advanced security against relentless threats. With a zero-trust security approach, all HPE infrastructure and as-a-service experiences use the most secure industry-standard servers with Silicon Root of Trust built in, along with comprehensive firmware protection embedded in every phase of the IT lifecycle, from the supply chain to automated firmware security to end of life.
HPE’s Silicon Root of Trust makes it impossible to tamper with our servers during manufacturing. With verification embedded in the silicon chip, HPE ProLiant servers will always boot in a pristine and immutable state. This level of protection is recognized by the cyber‑insurance industry, carrying their Cyber Catalyst designation, which can allow better terms and conditions on customers’ cyber‑insurance policies.
Security dashboards in HPE iLO ASIC and HPE GreenLake for Compute Ops Management help detect and address possible security vulnerabilities. They also display the status of important security features, the overall security status for the system, and the current configuration for the Security State and Server Configuration Lock features. You can use HPE iLO and HPE GreenLake for Compute Ops Management to set group-level configuration policies to ensure uniform security settings; use automated server settings and firmware management to ensure consistency and reduce maintenance time across your server landscape; comply with industry-standard certifications such as FIPS 140, TLS, and OpenSSL; use HPE iLO to log all security events, ensuring governance and helping you prepare for audits.