diff options
author | Oliver Steffen <osteffen@redhat.com> | 2024-12-11 11:48:07 +0100 |
---|---|---|
committer | Ard Biesheuvel <workofard@gmail.com> | 2025-03-16 20:21:44 +0100 |
commit | e868ece3c7d12be79f46da64b7c841d0486ac621 (patch) | |
tree | 87bb141357e671a0eb032259f643f9d8aa9c218f /BaseTools/Source/Python | |
parent | edf5e365c104fb86623b6359ac53d79777d521bf (diff) | |
download | edk2-e868ece3c7d12be79f46da64b7c841d0486ac621.zip edk2-e868ece3c7d12be79f46da64b7c841d0486ac621.tar.gz edk2-e868ece3c7d12be79f46da64b7c841d0486ac621.tar.bz2 |
SecurityPkg/Tpm2DeviceLibDTpm: Add TPM2 lib supporting SVSM vTPM
SEV-SNP provides a feature known as VM Privilege Level (VMPL), which
allows for services to be run in the guest at different privilege
levels. By running at VMPL0 (most privileged VM level), the SVSM can be
used to provide privileged services, e.g. a virtual TPM, for the guest
rather than trust such services from the hypervisor.
This patch adds a DTpm driver to communicate with a virtual TPM running
in the SVSM. The driver follows the vTPM protocol documented in the SVSM
specification.
SVSM vTPM functionality is available as new device and instance
libraries, which can be consumed optionally, keeping changes to the
regular TPM implementation minimal.
Cc: Jiewen Yao <jiewen.yao@intel.com>
Co-authored-by: James Bottomley <James.Bottomley@HansenPartnership.com>
Signed-off-by: Claudio Carvalho <cclaudio@linux.ibm.com>
Signed-off-by: Oliver Steffen <osteffen@redhat.com>
Diffstat (limited to 'BaseTools/Source/Python')
0 files changed, 0 insertions, 0 deletions