Note that I've rearranged the list items to indicate which items we agree on. 1. What is our goal? Participants were supportive of items in bold black. Discussion on red items will be continued on 202

Hi Thanks everyone for the discussion today. I updated the backlog, and also took my own “personal stab” at prioritizing med/low the remaining items. https://docs.google.com/document/d/17QAXfpEDlIvSbw

FYI _______ ----- Original message ----- Sent by: OCP-HWmgt@OCP-All.groups.io Subject: [EXTERNAL] [OCP-HWmgt] OCP-HWmgt@OCP-All.groups.io Digest #12 Date: Tue, Oct 5, 2021 6:05 AM ____________________

All, Is there an identified time slot when the security group will meet at the OCP summit? Don't see anything on published schedule of events yet. I need to volunteer for some booth duty slots and wou

Elaine, I cannot join today but have a different view on this; in that badge are not given they’re earned. I view none as incapable of even bronze, which is fine if compliance is not a target. In a pa

Anyone who wants to help with the proposal for a revised security checklist, feel free to join us today, 9/17, at 1pm EDT in the regular OCP Security GoToMeeting room. -Elaine

Folks have been asking why we are working on the next security requirements checklist. The reason is that we have received the following feedback on the current, approved checklist: ------- 1. ”We don

Alan, Christian, Danny, Eric H., James, Jeff A., and Jeff P.: Here is a "commenting" link to a first stab at incorporating the comments received in Tuesday's call. Bronze, Silver, and Gold are GONE! C

Hi On Tuesday’s call, the agenda is to review this document: https://docs.google.com/document/d/1-bfAF86cEKcn1guF-Qj2C2HhMM2oJ2njNGdHxZeetR0/edit# Please review and comment/suggest edits ahead of the

@Tim Eastman @Eric Hibbard @Alan Bumgarner @Danny Ybarra Please register in the OCP Security project directory, so others can reach you through email. (I don't have Tim's or Eric's email addresses.) A

Micron Confidential Please add me to the list! Thank you Micron Confidential

Hi All, Bryan was up today, but he is sick and can't make it. I re-ordered the schedule a little bit. Tim is still up next week with RSA signature requirements. -Nate

Here is one link where all the requirements from all OCP groups are listed as one long document. Here is another linkto a spreadsheet version of the requirements for all OCP groups. The security check

@Bryan, Thank you for covering various aspects of ownership representation and transfer. We seem to be converging on content for the doc! Some things worth mentioning about immutable code for carrying

Hi everyone, Can anyone recommend OCP (or other) documents that define security standards for a software installer? I'm looking in to this as part of the work being done on security upgrades for ONIE

Hi everyone Here’s my attempt at “normalizing” some common terminology. I hope that it helps. AUTHORITY: An entity or user. Each Authority has its own CREDENTIALS. A TCG Device has many AUTHORITIES. R

Below, please see my notes from today's call, which focused on how Seagate handles ownership provisioning and transfer in their storage devices. Near the end, it was suggested that we focus on TCG/Opa

Greetings OCP colleagues, OCP IC nominations are in, and I would like to ask for your endorsement and vote for my colleague, Dr. Andres Lagar-Cavilla, as the Security Project representative on the Inc

Greetings OCP colleagues, OCP IC nominations are in, and I would like to ask for your endorsement and vote for my colleague, Dr. Andres Lagar-Cavilla, as the Security Project representative on the Inc

Hi All, A number of folks in the US will be off next week for our July 4th holiday, so I'm cancelling the weekly meeting. I bumped all of the agenda items out 1 week. Let me know if you need me to rea