10 ms·
You can solve this by having a bootstrapping process that issues the appropriate credentials when bringing up a new server.
by cssx 11y ago
You can solve this by having a bootstrapping process that issues the appropriate credentials when bringing up a new server.
- donavanm 11y agoAnd how do you trust the identity of the new server/instance during boot strapping?
- 0x44 11y agoYou could leverage the TPM and some version of remote attestation and only permit key-requests from attested machines. Alternatively (or concurrently), you could PXE boot all devices with a parameterized shared-secret individualized for each node.