Hewlett Packard Enterprise (HPE) bo prvi proizvajalec, ki se vrača k »beli sestavi«. Podjetje je napovedalo novo kampanjo za proizvodnjo strežnikov iz komponent, izdelanih na ozemlju ZDA. HPE bo poskrbel za varnost dobavne verige za ameriške stranke v okviru pobude HPE Trusted Supply Chain. Usluga je namenjena predvsem strankam iz javnega sektorja, zdravstva in udeležencem trga finančnih storitev.
V HPE pojasnjujejo, da, kljub splošnemu prepričanju, varnost ne začne z povezovanjem in uporabo opreme, temveč se začne že v fazi sestavljanja. Zato je tako pomembno spremljati dobavne verige, označevanje in vse druge procese. Nepreverjene komponente lahko vsebujejo strojne in programske podmene (backdoors).
Zaradi pobude HPE Trusted Supply Chain bodo vladne enote in javni sektor lahko kupovali certificirane ameriške strežnike.
Prvi izdelek, ki bo izpolnjeval vse varnostne kriterije, bo strežnik HPE ProLiant DL380T. Ne vse njegove komponente so proizvedene v ZDA, vendar se že lahko izjavlja, da oprema spada v kategorijo 'Country of Origin USA', ne pa preprosto v ameriško proizvodnjo, označeno z oznako 'Made-in-USA'.
Izrazite značilnosti novega strežnika HPE ProLiant DL380T:
- Način povečane varnosti. Možnost se aktivira v tovarni in omogoča povečanje ravni zaščite sistema pred kibernetskimi napadi. Način bo zahteval določeno avtentikacijo pred vstopom na strežnik.
- Zaščita pred namestitvijo nevarnega operacijskega sistema. Uporablja se UEFI Secure Boot za zagotavljanje delovanja izključno s prednaloženo tovarniško operacijsko sistema.
- Zaklepanje konfiguracij strežnika. V primeru spremembe privzetih nastavitev bo sistem o tem obvestil ob zagonu. Možnost preprečuje kakršnokoli vmešavanje zunanjih uporabnikov.
- Odkritje vdora. Funkcija ščiti pred fizičnim vmešavanjem. Lastniki strežnika bodo prejeli opozorilo, če bo kdo poskušal odstraniti ohišje strežnika ali njegov del. Možnost je aktivna tudi, ko je strežnik izklopljen.
- Specialized secure delivery. HPE will provide a truck or driver if it's necessary to deliver the server directly from the factory to the customer's data center. This ensures that the equipment remains untouched by malicious actors during transport.
For the safety and flexibility of supply chains
The Covid-19 pandemic caused a number of issues in the logistics of electronic components and systems. Furthermore, the operational and business processes of many companies responsible for the production and supply of electronics were disrupted. HPE has decided to expand its supply channels to avoid dependence on a single company or country. A diverse and flexible supply chain is now a winning strategy for manufacturers around the globe. That is why HPE produces the finished products where it intends to sell them— in the USA.
In Wisconsin, HPE has a facility where specially cleared personnel work, and it is here that server equipment will be produced. Next year, a similar program is planned to be developed for Europe, launching production in one of the EU countries.
HPE Trusted Supply Chain is not the first initiative by HPE aimed at enhancing information security. Previously, the Silicon Root of Trust project was launched. Its essence lies in a secure long-term digital signature, which allows the security of the server remote management system to be ensured. (Integrated Lights-Out). The server will not boot if firmware or drivers do not match the digital signatures.
Most likely, HPE will be the first among major companies returning to "white box" assembly. The processes of relocating manufacturing out of China other companies are transferring assembly lines from China to Taiwan due to the trade war between the USA and China.
Izvor: habr.com
