Abstract: Examples associated with cryptographic key security are described. One example system includes a secure storage accessible to a basic input/output system (BIOS). A BIOS security module stores an authorization value in a fixed location in the secure storage. The authorization value is stored by the BIOS during a boot of the system. A cryptographic key module reads the authorization value from the fixed location, overwrites the authorization value in the fixed location, and obtains a cryptographic key using the authorization value.

Abstract: An example computing device includes a processor, a first storage device, and a second storage device. The second storage device stores instructions to implement a firmware. The firmware is to install an agent application into the first storage device. The firmware is also to activate the agent application subsequent to installing the agent application. The firmware is further to, in response to receiving a manifest file, instruct the agent application to monitor the computing device based on the manifest file.

Abstract: A method, in an example, for secure key exchange in a platform, the method comprises checking a value of parameter via a platform hardware initialisation device to determine a status of an agent, generating at least one symmetric cryptographic key, encrypting the at least one symmetric cryptographic key using a public cryptographic key, generating a variable representing the encrypted at least one symmetric cryptographic key, and enabling access to the variable from the agent via the platform hardware initialisation device.

Abstract: An example computing device includes a processor, a first storage device, and a second storage device. The second storage device stores instructions to implement a firmware. The firmware is to install an agent application into the first storage device. The firmware is also to activate the agent application subsequent to installing the agent application. The firmware is further to, in response to receiving a manifest file, instruct the agent application to monitor the computing device based on the manifest file.

Abstract: Examples associated with cryptographic key security are described. One example system includes a secure storage accessible to a basic input/output system (BIOS). A BIOS security module stores an authorization value in a fixed location in the secure storage. The authorization value is stored by the BIOS during a boot of the system. A cryptographic key module reads the authorization value from the fixed location, overwrites the authorization value in the fixed location, and obtains a cryptographic key using the authorization value.

Abstract: An example apparatus includes a virtual drive controller module to receive a read request from a guest virtual machine (VM) during a restore operation. The apparatus also includes a virtual drive manager module to determine whether data associated with the read request is stored in a storage volume of the guest VM using a sector mapping lookup table during the restore operation. In response to a determination that the data is absent in the storage volume, the virtual drive manager module is to copy the data from a backup image associated with the guest VM to the storage volume, update the sector mapping lookup table to indicate that the data is stored in the storage volume, and transmit the data to the guest VM.

Abstract: Examples allow booting from remote storage. In one example, a storage disk includes disk sectors which can be checked for data to boot a virtual machine application. If the disk sector does not include the data, the data can be downloaded from a remote storage unit. The data can then be stored on the appropriate disk sector of the storage disk for use by the application.

Abstract: An example apparatus includes a virtual drive controller module to receive a read request from a guest virtual machine (VM) during a restore operation. The apparatus also includes a virtual drive manager module to determine whether data associated with the read request is stored in a storage volume of the guest VM using a sector mapping lookup table during the restore operation. In response to a determination that the data is absent in the storage volume, the virtual drive manager module is to copy the data from a backup image associated with the guest VM to the storage volume, update the sector mapping lookup table to indicate that the data is stored in the storage volume, and transmit the data to the guest VM.

Abstract: Examples allow booting from remote storage. In one example, a storage disk includes disk sectors which can be checked for data to boot a virtual machine application. If the disk sector does not include the data, the data can be downloaded from a remote storage unit. The data can then be stored on the appropriate disk sector of the storage disk for use by the application.