Skip to content

doc: added measured boot documentation#1952

Open
kbakanov-dev wants to merge 3 commits into
NVIDIA:mainfrom
kbakanov-dev:mb_onboarding_docs
Open

doc: added measured boot documentation#1952
kbakanov-dev wants to merge 3 commits into
NVIDIA:mainfrom
kbakanov-dev:mb_onboarding_docs

Conversation

@kbakanov-dev
Copy link
Copy Markdown
Contributor

@kbakanov-dev kbakanov-dev commented May 27, 2026

Description

This is a documentation around using Measured Boot

Type of Change

  • Add - New feature or capability
  • Change - Changes in existing functionality
  • Fix - Bug fixes
  • Remove - Removed features or deprecated functionality
  • Internal - Internal changes (refactoring, tests, docs, etc.)

Related Issues (Optional)

Breaking Changes

  • This PR contains breaking changes

Testing

  • Unit tests added/updated
  • Integration tests added/updated
  • Manual testing performed
  • No testing required (docs, internal refactor, etc.)

Additional Notes

@kbakanov-dev kbakanov-dev requested a review from Coco-Ben as a code owner May 27, 2026 15:42
@github-actions
Copy link
Copy Markdown

Comment thread docs/provisioning/attestation_and_security.md Outdated
Comment thread docs/provisioning/attestation_and_security.md Outdated

Measured Boot requires the presence of a TPM (Trusted Platform Module) chip on a managed host. Since DPUs don't really have TPMs (or they not enabled yet), we don't perform Measured Boot for DPUs.

For the hosts the Measured Boot is configurable and can be turned off with `attestation_enabled` flag set to `false`.
Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

In which configuration?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sorry, what do you mean?

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sorry for my terseness, I meant that you should specify 'which configuration' this needs to be added. A user of this software is probably sitting in front of a bunch of different config files and wouldn't know which one to add this option to.

Comment thread docs/provisioning/attestation_and_security.md Outdated
Comment thread docs/provisioning/attestation_and_security.md Outdated
Comment thread docs/provisioning/attestation_and_security.md Outdated
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants