Vmware, Inc.

Ivan Dimitrov Velevski

Petr Vandrovec

Ivan Nikolov Ivanov

Techniques for implementing a read-only mode for a virtual TPM device are provided. In one set of embodiments, while operating in this read-only mode, the virtual TPM device will not generate, store, or allow the use of any security sensitive data, thereby avoiding the security risks arising out of replicating (e.g., cloning) a VM or VM template that includes the device.

Read-only mode for virtual trusted platform module (TPM) devices

A first virtual machine executing in a first computer server is replicated to a second virtual machine executing in a second computer server, which is connected to the first computer server over a network. Virtual disks of the first virtual machine are transmitted to the second server, where each transmitted virtual disk corresponds to one of the virtual disks of the second virtual machine, the virtual disks of the first virtual machine having a format different from the format of the virtual disks of the second virtual machine. A plurality of updates to the virtual disks of the first virtual machine is captured, and contiguous data blocks from the virtual disks of the first virtual machine that are subject to the captured updates are identified. The identified contiguous data blocks are then transmitted to the second server for storage in the virtual disks of the second virtual machine.

Growing community of inventors

Vratsa, Bulgaria

Ivan Dimitrov Velevski