Re: [edk2-devel] [PATCH 00/16] Provide SEV-SNP support for running under an SVSM

2024-01-27 Thread Yao, Jiewen
Thanks Tom. Below is exactly what I am looking for: "the decision to use the SVSM API will be based on the VMPL level at which OVMF is running." OVMF needs to detect SEV-SNP, then make next level decision on VMPL. Makes sense to me. Thank you Yao, Jiewen > -Original Message- > From:

Re: [edk2-devel] [PATCH 00/16] Provide SEV-SNP support for running under an SVSM

2024-01-27 Thread Lendacky, Thomas via groups.io
On 1/26/24 22:04, Yao, Jiewen wrote: Thanks Tom. Please give me some time to digest this patch set before I can give some feedback. One quick question to you: With this patch, we need to support multiple SEV modes: 1. SEV guest firmware 2. SEV-ES guest firmware 3. SEV-SNP guest firmware 4.

Re: [edk2-devel] [PATCH 00/16] Provide SEV-SNP support for running under an SVSM

2024-01-26 Thread Yao, Jiewen
Thanks Tom. Please give me some time to digest this patch set before I can give some feedback. One quick question to you: With this patch, we need to support multiple SEV modes: 1. SEV guest firmware 2. SEV-ES guest firmware 3. SEV-SNP guest firmware 4. SEV-SNP SVSM guest firmware And all these

[edk2-devel] [PATCH 00/16] Provide SEV-SNP support for running under an SVSM

2024-01-26 Thread Lendacky, Thomas via groups.io
BZ: https://bugzilla.tianocore.org/show_bug.cgi?id=4654 This series adds SEV-SNP support for running OVMF under an Secure VM Service Module (SVSM) at a less privileged VM Privilege Level (VMPL). By running at a less priviledged VMPL, the SVSM can be used to provide services, e.g. a virtual TPM,