open-edge-platform/trusted-compute

boot-guard

Report Intel Boot Guard provisioning state, profile (0, 3, 4, or 5), and Verified/Measured Boot modes. Use when asked about Boot Guard, BtG profiles, or firmware root of trust.

crypto-capabilities

Report hardware crypto acceleration available on the CPU - AES-NI, SHA-NI, RDRAND, RDSEED. Use when asked which crypto instructions the platform supports.

disk-encryption

Report disk encryption configuration - LUKS/dm-crypt volumes, cipher and key size, swap encryption, and unencrypted volumes. Use when asked whether disks or swap are encrypted.

secure-boot

Report UEFI Secure Boot configuration on an Intel edge platform - enabled state, Setup Mode, and enrolled PK/KEK/db keys. Use when asked about Secure Boot status or boot chain key enrollment.

tme

Report Intel Total Memory Encryption (TME/MKTME) support, activation state, and encryption algorithm. Use when asked about memory encryption on an Intel platform.

trusted-compute-install

Install or uninstall the Intel Trusted Compute stack on bare-metal Ubuntu 24.04, via K3s or Docker. Use when asked to install, deploy, verify, or remove Trusted Compute packages.