Ask the Experts: Caliptra and Root of Trust for AI Infrastructure

AI, cloud infrastructure, and connected systems are increasing the need for security that starts at the hardware level. In this Ask the Experts video, Vincent van der Leest, Director of Product Marketing for Security IP at Rambus, explains Caliptra, its role as an open-source Root of Trust foundation, and the security challenges companies must address when integrating Caliptra into production SoCs.

Learn how Rambus CryptoManager Root of Trust complements Caliptra with additional security capabilities, integration and orchestration, and commercial support to help customers reduce engineering effort and accelerate time to market.

What This Video Covers

In this Ask the Experts, Vincent van der Leest explores:

• Why AI and data center systems need a trusted hardware security foundation
• What Caliptra is and the security capabilities it provides
• Why hyperscalers and chip companies are adopting Caliptra
• What it takes to integrate Caliptra into a production SoC
• How CryptoManager Root of Trust complements the Caliptra specification
• How additional capabilities such as secure boot, crypto agility, and countermeasures strengthen security
• How a proven Root of Trust solution can reduce integration risk, engineering effort, and time to market

Why Does AI Infrastructure Need a Hardware Root of Trust?

AI and data center infrastructure increasingly consist of complex, connected, and autonomous systems containing high-value data and models. A single compromise can therefore have significant consequences.

Security needs to begin before the operating system or application software loads. A hardware Root of Trust provides a trusted foundation with immutable device identity and cryptographic keys while helping ensure software boots securely.

What Is Caliptra?

Caliptra is an open-source Root of Trust foundation created through industry collaboration that includes AMD, Google, Microsoft, and NVIDIA. It provides foundational security capabilities such as device identity, measured boot, and attestation.

By establishing a common security foundation, Caliptra can provide baseline assurance for hyperscalers, help prevent vendor lock-in, and enable the industry to share knowledge and improve security solutions collaboratively.

Why Are Companies Adopting Caliptra?

Several factors are contributing to the adoption of Caliptra, including increased transparency, the potential to reduce development costs, and requirements from hyperscalers.

For AI infrastructure in particular, establishing a Root of Trust is critical because these systems represent significant investments and must remain secure throughout their lifecycle. Caliptra provides a standardized foundation on which this security can be built.

Is Caliptra a Complete Production-Ready Root of Trust?

Caliptra establishes an important foundation, but adopting it is not simply a matter of adding a core to an SoC. Turning that foundation into a production-ready implementation requires additional security engineering.

This includes:

• Integrating Caliptra into the SoC
• Extending security across the rest of the SoC
• Building the complete Root of Trust infrastructure
• Securing the complete system
• Providing support throughout the device lifecycle

This distinction is particularly important for organizations evaluating Caliptra. A standardized foundation provides a starting point, but additional capabilities, integration, and support are needed to create a complete production solution.

How Does Rambus CryptoManager Root of Trust Complement Caliptra?

Rambus CryptoManager Root of Trust is designed to complement the Caliptra specification and help customers move from a standardized security foundation to a production-ready implementation.

The solution provides:

• Integration and security orchestration for the SoC
• Additional secure boot functionality
• Cryptographic agility
• Security countermeasures
• Reduced integration risk and engineering effort
• Documentation and a streamlined interface
• Rambus support throughout the product lifecycle

This allows customers to build on Caliptra while leveraging a mature and proven Root of Trust platform rather than developing every security component from the ground up.

What Are the Benefits of Using CryptoManager Root of Trust with Caliptra?

Using Rambus CryptoManager Root of Trust alongside Caliptra can help SoC developers:

• Reduce integration risk
• Reduce engineering effort
• Accelerate time to market
• Scale Root of Trust implementations
• Gain assurance from a proven security solution
• Access commercial support throughout development and deployment

The result is a more streamlined path from adopting the Caliptra specification to implementing a production-ready Root of Trust in silicon.

Why Choose Rambus for a Caliptra-Based Root of Trust?

Rambus brings a long history of Root of Trust development and a proven solution built over many years. Customers also receive support extending from specification and implementation through the broader product lifecycle.

The distinction is simple: Caliptra provides the foundation, while Rambus CryptoManager Root of Trust extends that foundation to the production level.

Watch the Ask the Experts Video

Learn how Caliptra provides a common Root of Trust foundation for next-generation AI and data center infrastructure, and how Rambus CryptoManager Root of Trust helps customers accelerate adoption while building a more complete, production-ready security solution.

Watch the Ask the Experts video to learn more about accelerating Caliptra adoption with Rambus CryptoManager Root of Trust.

Frequently Asked Questions

What is Caliptra?
Caliptra is an open-source Root of Trust foundation developed through industry collaboration. It provides foundational capabilities including device identity, measured boot, and attestation.

Why is Caliptra important for AI infrastructure?
AI infrastructure consists of increasingly complex, connected, and autonomous systems that contain valuable data and models. Caliptra provides a common hardware security foundation that organizations can build upon to help protect these systems throughout their lifecycle.

Is Caliptra a production-ready Root of Trust?
Caliptra provides a Root of Trust foundation, but additional engineering is required to integrate it into an SoC, extend security across the system, and build a complete production implementation.

How does Rambus CryptoManager Root of Trust complement Caliptra?
Rambus CryptoManager Root of Trust provides integration and security orchestration along with capabilities including secure boot, crypto agility, and security countermeasures. It is designed to reduce the integration risk and engineering effort involved in implementing Caliptra.