Technologies for accelerated orchestration and attestation with edge device trust chains

Abstract

Technologies for accelerated orchestration and attestation include multiple edge devices. An edge appliance device performs an attestation process with each of its components to generate component certificates. The edge appliance device generates an appliance certificate that is indicative of the component certificates and a current utilization of the edge appliance device and provides the appliance certificate to a relying party. The relying party may be an edge orchestrator device. The edge orchestrator device receives a workload scheduling request with a service level agreement requirement. The edge orchestrator device verifies the appliance certificate and determines whether the service level agreement requirement is satisfied based on the appliance certificate. If satisfied, the workload is scheduled to the edge appliance device. Attestation and generation of the appliance certificate by the edge appliance device may be performed by an accelerator of the edge appliance device. Other embodiments are described and claimed.

1 . An edge appliance device for appliance attestation, the edge appliance device comprising:
 an attestation manager to perform an attestation process with a component of the edge appliance device to generate a component certificate; and   a platform verifier to (i) generate an appliance certificate, wherein the appliance certificate is indicative of the component certificate and current utilization of the edge appliance device, and (ii) provide the appliance certificate to a relying party.   
     
     
         2 . The edge appliance device of  claim 1 , wherein the edge appliance device comprises an accelerator, and wherein the accelerator comprises the attestation manager and the platform verifier. 
     
     
         3 . The edge appliance device of  claim 1 , wherein:
 the platform verifier is further to receive certified telemetry from the component, wherein the certified telemetry is indicative of current utilization of the component; and   to generate the appliance certificate comprises to generate the appliance certificate based on the current utilization of the component.   
     
     
         4 . The edge appliance device of  claim 1 , wherein the component comprises an accelerator, a compute platform, a memory component, a storage component, or a functional block of the edge appliance device. 
     
     
         5 . The edge appliance device of  claim 1 , wherein the component comprises a disaggregated resource of the edge appliance device. 
     
     
         6 . The edge appliance device of  claim 1 , wherein:
 the attestation manager is further to (i) identify a plurality of components of the edge appliance device, wherein the plurality of components comprises the component, and (ii) perform, for each component of the plurality of components, an attestation process to generate a component certificate for each component of the plurality of components; and   the appliance certificate is indicative of the component certificate of each component of the plurality of components.   
     
     
         7 . The edge appliance device of  claim 1 , wherein to perform the attestation process comprises to receive a component certificate indicative of a trusted execution environment provided by the component. 
     
     
         8 . The edge appliance device of  claim 7 , wherein the component certificate is indicative of a security property of the trusted execution environment. 
     
     
         9 . The edge appliance device of  claim 1 , wherein to perform the attestation process comprises to securely receive a component certificate indicative of a hardware configuration and a firmware configuration of the component. 
     
     
         10 . The edge appliance device of  claim 9 , wherein the component certificate comprises a hash value indicative of the hardware configuration and the firmware configuration of the component. 
     
     
         11 . The edge appliance device of  claim 1 , wherein to provide the appliance certificate to the relying party comprises to provide the appliance certificate to a remote orchestrator device. 
     
     
         12 . The edge appliance device of  claim 1 , wherein to provide the appliance certificate to the relying party comprises to provide the appliance certificate to a platform active root of trust. 
     
     
         13 . One or more computer-readable storage media comprising a plurality of instructions stored thereon that, in response to being executed, cause an edge appliance device to:
 perform an attestation process with a component of the edge appliance device to generate a component certificate;   generate an appliance certificate, wherein the appliance certificate is indicative of the component certificate and current utilization of the edge appliance device; and   provide the appliance certificate to a relying party.   
     
     
         14 . The one or more computer-readable storage media of  claim 13 , wherein:
 to perform the attestation process comprises to perform the attestation process by an accelerator of the edge appliance device;   to generate the appliance certificate comprises to generate the appliance certificate by the accelerator; and   to provide the appliance certificate comprises to provide the appliance certificate by the accelerator.   
     
     
         15 . The one or more computer-readable storage media of  claim 13 , further comprising a plurality of instructions stored thereon that, in response to being executed, cause the edge appliance device to:
 receive certified telemetry from the component, wherein the certified telemetry is indicative of current utilization of the component;   wherein to generate the appliance certificate comprises to generate the appliance certificate based on the current utilization of the component.   
     
     
         16 . The one or more computer-readable storage media of  claim 13 , further comprising a plurality of instructions stored thereon that, in response to being executed, cause the edge appliance device to:
 identify a plurality of components of the edge appliance device, wherein the plurality of components comprises the component; and   perform, for each component of the plurality of components, an attestation process to generate a component certificate for each component of the plurality of components;   wherein the appliance certificate is indicative of the component certificate of each component of the plurality of components.   
     
     
         17 . The one or more computer-readable storage media of  claim 13 , wherein to perform the attestation process comprises to securely receive a component certificate indicative of a hardware configuration and a firmware configuration of the component. 
     
     
         18 . A virtualized system for appliance orchestration, the virtualized system comprising:
 a workload orchestrator to receive a workload scheduling request, wherein the workload scheduling request is indicative of a service level agreement requirement associated with a workload; and   an aggregated attestation manager to receive an appliance certificate from an edge appliance device, wherein the appliance certificate is indicative of an aggregate component certificate and a current utilization of the edge appliance device, wherein the aggregate component certificate is indicative of a configuration of each component of a plurality of components of the edge appliance device;   wherein the workload orchestrator is further to (i) determine whether the edge appliance device satisfies the service level agreement requirement based on the appliance certificate, and (ii) schedule the workload to the edge appliance device in response to a determination that the edge appliance device satisfies the service level agreement requirement.   
     
     
         19 . The virtualized system of  claim 18 , wherein:
 the aggregated attestation manager is further to verify the appliance certificate in response to receipt of the appliance certificate;   wherein to schedule the workload further comprises to schedule the workload in response to verification of the appliance certificate.   
     
     
         20 . The virtualized system of  claim 19 , wherein to verify the appliance certificate comprises to compare the appliance certificate to an expected certificate, wherein the expected certificate is indicative of an expected configuration of each component of the plurality of components of the edge appliance device.