Security certs for framework egpu dock

Framework Laptop 16
#1

With the tease that there would be an external thunderbolt compatible dock that accepts the gpu module from the framework 16, could you please look into selling the dock w/ egpu as a single combination sku, and getting some security certs to make it viable to pitch to corporate IT as a solution?

I stole this from the hp g4 thunderbolt site, and something like the nist 800-173 reqs would probably go a long way to helping convince them to consider it.

Based on HP’s internal analysis of docking stations that are Thunderbolt™ 4, have auto validating & self healing firmware, Meet NIST 800-173 requirements, have Port control, the ability to disable the RJ-45 and a BIOS MAPT authorized list.
HP Sure Start on HP Thunderbolt G4 dock supports firmware integrity verification and recovery it does not include real-time and runtime protections or Microsoft SCCM integration typically found on HP Sure Start in HP notebooks.

it may very well be meaningless corprorate drivel, but that’s what manglement looks for when they’re making decisions.

1 Like
#2

+1 for this

1 Like
#3

I am always careful about manufacturer adding their self healing and secure stuff to hardware. The self-healing part means there is access to the network somehow to verify and gather new software. At the same time, it means there is a potential loophole for hackers to get into the device (with or without certificate).
Like AV software, it creates holes to implant itself, exactly as a virus would do.

IMHO, security comes in the design and implementation phase. So - if something like this is designed, please also design the possibility to disable/remove all corporate crap from it.

1 Like