Eric Augé <[email protected]> writes: > Hello, > > Support has been added recently. > > I wonder how you determine support in your CPU, I have a laptop with a > fairly recent AMD Ryzen CPU, I expected psp / SEV to be present / > detected... > > -- > cpu0: cpuid 1 > edx=178bfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,HTT> > ecx=76f8320b<SSE3,PCLMUL,MWAIT,SSSE3,FMA3,CX16,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,AES,XSAVE,AVX,F16C,RDRAND> >
You left out what I'm pretty sure is the critical part here (pulled from your attache dmesg): cpu0: cpuid 8000001F eax=1<SME> This should be reporting SEV and SEV-ES support, not SME. hshoexer@ or mlarkin@ can tell me if I'm wrong here. >...but : >"AMD 19h/7xh PSP" rev 0x00 at pci5 dev 0 function 2 not configured > >so I suspect it's the reason why sev or seves are not supported in vmd >conf on my machine. (attached dmesg) > The reason is the cpu doesn't support SEV & SEV-ES per cpuid 8000001F. I'm not an AMD expert, but I think PSP serves multiple purposes and exists in more AMD cpus than support SEV/SEV-ES. It's confusing. AFAIK only Epyc-class AMDs and maybe some newer Ryzen Threadripper class ship with it. I'm unaware of any portable devices with SEV...one of the reasons I don't own any supported hardware. >Do I have to activate, sysctl or recompile the kernel with additional >config options? No. Only config should be vmd-specific. -dv
