On a Wednesday in 2022, Daniel P. Berrangé wrote:
With the SEV-ES policy the VMSA state of each vCPU must be included
in
the measured data. The VMSA state can be generated using the 'sevctl'
tool, by telling it a QEMU VMSA is required, and passing the hypevisor's
CPU SKU (family, model, stepping).
Signed-off-by: Daniel P. Berrangé <berrange(a)redhat.com>
---
docs/manpages/virt-qemu-sev-validate.rst | 58 ++++++++++++++++++++
tools/virt-qemu-sev-validate | 69 ++++++++++++++++++++++--
2 files changed, 124 insertions(+), 3 deletions(-)
Reviewed-by: Ján Tomko <jtomko(a)redhat.com>
Jano