CONFIG_INTEL_TXT: Enable Intel(R) Trusted Execution Technology (Intel(R) TXT)

General informations

The Linux kernel configuration item CONFIG_INTEL_TXT:

• prompt: Enable Intel(R) Trusted Execution Technology (Intel(R) TXT)
• type: bool
• depends on: CONFIG_HAVE_INTEL_TXT
• defined in security/Kconfig
• found in Linux kernels: 2.6.32–2.6.39, 3.0–3.19, 4.0–4.20, 5.0–5.19, 6.0–6.8, 6.9-rc+HEAD

Help text

This option enables support for booting the kernel with the Trusted Boot (tboot) module. This will utilize Intel(R) Trusted Execution Technology to perform a measured launch of the kernel. If the system does not support Intel(R) TXT, this will have no effect.

Intel TXT will provide higher assurance of system configuration and initial state as well as data reset protection. This is used to create a robust initial kernel measurement and verification, which helps to ensure that kernel security mechanisms are functioning correctly. This level of protection requires a root of trust outside of the kernel itself.

Intel TXT also helps solve real end user concerns about having confidence that their hardware is running the VMM or kernel that it was configured with, especially since they may be responsible for providing such assurances to VMs and services running on it.

See https://www.intel.com/technology/security/ for more information about Intel(R) TXT. See http://tboot.sourceforge.net for more information about tboot. See Documentation/arch/x86/intel_txt.rst for a description of how to enable Intel TXT support in a kernel boot.

If you are unsure as to whether this is required, answer N.

Hardware

LKDDb

Raw data from LKDDb:

• (none)

Sources

This page is automaticly generated with free (libre, open) software lkddb(see lkddb-sources).

The data is retrived from:

• Linux kernel
• Linux Kernel Driver DataBase (LKDDb)

Automatic links from Google (and ads)

Custom Search

Popular queries: