Hi. I would like to set up PXE, but I

Question

Hi. I would like to set up PXE, but I

worry that anyone on the network can impersonate the server and send me a malicious image. Is there any way I can sign and authenticate images that I receive during PXE?

0

19.10.2021

10 ответов

22 просмотра

Ender Автор вопроса

Raptor Blue Bear
It's a minefield

Yeah, so how can I remove the mines? :)

0

19.10.2021

Raptor Blue Bear

Ender
Yeah, so how can I remove the mines? :)

Effectively you can't. PXE can't be made more secure, neither can you do much to lock down DHCP (without it becoming miserable to manage)

0

19.10.2021

Ender Автор вопроса

Raptor Blue Bear
Effectively you can't. PXE can't be made more secu...

Any alternatives?

0

19.10.2021

Raptor Blue Bear

Ender
Any alternatives?

Besides crying you have a few options, but it depends on what you ultimately want to achieve

0

19.10.2021

Ender Автор вопроса

Raptor Blue Bear
Besides crying you have a few options, but it depe...

I want to have a central storage of signed isos that I can boot off remotely (within the same subnet) and have the isos authenticated before running them.

0

19.10.2021

Raptor Blue Bear

Ender
I want to have a central storage of signed isos th...

i'll DM you

0

19.10.2021

Ender Автор вопроса

Raptor Blue Bear
i'll DM you

Sure

0

19.10.2021