John Kuraikose

@Rich Rodgers

Lorenzo King

@Vasavi V 

Hussein Alayan  

Randy Templeton (TSC Chair)

@Tina Tsou (Deactivated)

David Martin

Chanda Bhingarde 

@Joseph Pearson

Benny Davis

Martin Kronberg

Nathan Phelps 

Lincoln Lavoie

Announcement and Issues

3/14/2024

Use of Go programing language for FDO implementation · fido-device-onboard · Discussion #681 (github.com)

2/1/2024

Governing Board currently voting on promotion to stage 2 now (via e-mail)

release FDO 1.1.8 in March

propose use Git Issue then Git discussion around fdo-go

IBM presenting FDO Summit on 12/14

released FDO 1.1.7 - FSIM module preview (for Java only), 

Need Public Key from OpenHorizon for RV

https://openprofile.dev/ meeting recordings

https://lists.lfedge.org/g/tac-community-lab

10/26

10/12 

• Fido Interop Event on going week Oct10-13th

• IBM Public owner key - Randy to send API call

• Machinerinng - When will FDO be run? 

  • FDO onboard to Open Horizon Agent and get connected - Anax Agent can download containers plus (JimBox - Catalog of Software)

  • DLR German government  Dr Danial Eberz (linked in) - AgriREGIO

9/28

• Fido Interop Event Oct 5th

9/14

• Nathan did a demo for Open Horizon - Will post the link to the recording once he has it 

• Vasavi requested for an Open Horizon demo to the FDO team from Nathan. Nathan to  check if this is ok with IBM. 

• FDO team working on allow/ deny list feature implementation on hosted RV server 

  • Nathan to check if he can get a sample Open Horizon certificate that we can use for validation

  • Owner API to get owner cert in PEM format

8/31

• Nathan planning to do a demo in the Open Horizon meeting on 14th September on Open Horizon +FDO . 9:30 AM EST - https://zoom-lfx.platform.linuxfoundation.org/meeting/97273970731?password=f9367132-0fc0-4910-819f-c6e3bd5bcabf - meeting link 

• Management Hub Working Group 

• FDO team working on allow/ deny list feature implementation on hosted RV server 

  • Nathan to check if he can get a sample Open Horizon certificate that we can use for validation

  • Owner API to get owner cert in PEM format

• Open Horizon currently on FDO 1.1.5.  Joe to discuss with his team on upgrading Open Horizon to 1.1.6 

• FDO Project annual review August 9th

  • https://lf-lfedge.atlassian.net/wiki/display/LE/Security+Device+Onboard+-+Stage+1+-+2023-08-09

  • FDO releases this year

    • https://github.com/fido-device-onboard/pri-fidoiot/releases/tag/v1.1.6

  • SDO/FDO name change

  • Completed OSF Badge questioner

• https://docs.google.com/document/d/1nd5Uhd0mDuxVVrF6Mogf-53OoK6V0_uXP_uuT0pUUs0/edit?usp=sharing

• FDO 1.1.6  - Live 
  
  

  • Look at updating FDO security.md to include vulnerabilities 

  • Conformance/certificates fix

  • FDO integration development complete https://github.com/fido-alliance/fdo-sim

  • Project update - everything new since April

• FDO 1.1.5.1 - 

  • Deployed on Intel RV

  • Fix for Conformance TO (between owner and RV - Devices not affected)

  • New APIs for Owner - You get vouchers by SerialNo as as GUID 

• FDO 1.1.6?

  • Java17 LTS

  • FSIMs

• BMO 

  • 1:00pm EST/10:00am PST (wait for Q3)

• Open Horizon FDO Update - Joe

  • update docs to say FDO instead of "Intel FDO" 

  • Updated to 1.1.5.0

  • Updating all in one solution to FDO instead of SDO

  • IBM has membership in FIDO 

  • New FDO DN for LF Edge LAB rv server - https://docs.google.com/document/d/11fbHluNmH2x72DJqId7wpNCL6jwNkGgAp-yJEGTtHbY/edit?pli=1#heading=h.en8cy6hno0c6

  • Fido certification (conformance tool)

    • Independent certification vs LF Edge Certification

    •  Randy will send Dough Larsons github to FIDO to get access to conformance tool repo

  • FSIM spec available publicly replace fdo_sys 

  • FDO integration development complete https://github.com/fido-alliance/fdo-sim

  • IEAM 

    • IEAM 4.5 GA with FDO support: https://www.ibm.com/common/ssi/ShowDoc.wss?docURL=/common/ssi/rep_ca/4/877/ENUSZP23-0054/index.html

      • FDO 1.0 → FDO.1.15

    • Any addition FDO integration or usage

  • Open Horizon

    • Documentation "Intel FDO" → Drop "Intel"

    • Open Horizon Agent should be compatible with IEAM

    • https://open-horizon.github.io/docs/installing/fdo/#fdo-overview

  • Demo of FDO integration with Open Horizon on 02-9  https://lists.lfedge.org/g/open-horizon-mgmt-hub/viewevent?repeatid=30306&eventid=1712660&calstart=2023-02-09

• TAC Request

  • OpenSSF badging (Randy) - Questionnaire to understand the current project security practices - Required by all LF Edge projects, Whitehouse is looking at all open source projects and their security practices - Randy - go through every question

  • LFXSecurity portal onboarding (Vasavi) - security.lfx.dev - Kendall to contact Vasavi to being the onboarding process

  • Identify a primary/secondary reps to attend TAC meetings on a regular basis - Randy/Vasavi

  • Community Lab (RV-server)

    • Conformance testing - (RV only, - Owner,Manuf - )

    • add fdo to DNS name for lab (letsEncypt Certificate - use subject alternate name)

Decisions

• For next meeting

• AgriRegio Projekt
  
  

  • expeer

  • machinering

  • Upcoming meeting for LF Edge Lab

  • Update on 1.1.5 release

  • Update on SDO archive

  • Updates for FDO project by 3/3

    • Significate updates for Q1

  • Sharing updates to the growth plan for FDO

    • FDO rename

  • Increase Community engagement

    • EdgeX foundry

      • ORRA (Open Retail Reference Architecture) Chair - Arnaud Le Hors lehors@us.ibm.com

        • Open Horizons, EdgeX, FDO 

        • Open Ziti (Secure Networking) Sean

      • April 10th - Sean Williams / Todd Leasher (Intel) 

    • Other LF Edge Project engagement

  • BMO - Bare Metal Onboarding

    • Randy to work on setting up tech meeting on BMO

Update on next release 

• Next release FDO

  • No updates. Should have a plan by the next TSC meeting

Update on Goals for the project sub committee

• 2 broad goals: Support LF Edge Projects (SDO integration across LF Edge Projects). Providing developer tools that assist in compatibility testing and rapid development.

• Next Step: Develop Growth Plan for LF Edge Phase 2 requirements

• Docker containers  - Bill of Materials (Bom) Syft/Grype (reads docker container and reports all software used)

SL No.

Voting Member

Member Company

Y/N/A

Ahmed AlWattar

Chanda Bhingarde

Lorenzo King

Hussein Alayan (Benny)

@Rich Rodgers

@Vasavi V

Randy Templeton

David Martin