Zero Trust Security is a philosophical approach that focuses on identity and access management, assuming that everything is potentially compromised. Unlike traditional perimeter security models that trust certain network boundaries, Zero Trust requires all users, devices, and applications to continuously authenticate themselves before accessing resources. This model applies the principle of least privilege, ensuring that access is granted only to those who are authorized.

HPE implements Zero Trust through a comprehensive strategy that includes hardware supply chain security, software supply chain security, and networking solutions. Key components include platform certificates for tamper detection, cryptographic identities for secure onboarding, and a trusted supply chain that ensures security from the ground up. HPE also leverages technologies like SPIFFE and SPIRE for enhanced software security and employs encryption at various layers to protect data throughout its lifecycle.

Project Aurora is an initiative by HPE aimed at enabling a cloud-native Zero Trust architecture from edge to cloud. It focuses on creating a trustworthy environment by allowing hardware and software to be remotely verified. By leveraging a silicon root of trust, Project Aurora continuously monitors and asserts a chain of trust from workloads to the hardware they run on, enhancing security across HPE GreenLake cloud services and HPE Ezmeral software platforms.