Securing Customer Secrets with Barbican and HSMs
summary
Presentation describes implementing and operating Barbican to store customer secrets on hardware security modules (HSMs), specifically for encrypting Cinder volumes and providing vTPM functionality. It covers deployment and day-to-day management of Barbican integrated with HSMs to secure encryption keys used by OpenStack services.
AI-written summary · about
chapters (10)
- 0:00Introduction to Barbican
- 3:03Why use Barbican
- 10:36Cinder and Nova integration
- 16:37Default backend issues
- 16:58HSMs introduction
- 22:54HSM configuration
- 26:25Securing HSM access
- 28:53Limits and recommendations
- 32:26Summary and SecNumCloud compliance
- 34:24Q&A
related talks
27mBringing in Compliance for Public
35mConfidential Computing in the Control Plane (case study using Barbican)
27mSecurity++: Hide Your Secrets via a Distributed Hardware Security Mod...
47mManaging your Secrets in a Cloud Environment
29mBehind Closed Doors: Managing Passwords in a Dangerous World
32mCare and Feeding of HSMs: Key Management in Hard Mode
38mKeeping Secrets - A Practical Approach to Managing Credentials
37mSecuring Data in the Quantum Era: From the Root of Trust to Protecting Ecosystems