Attestation of the VM launched with SEV about amdsev HOT 2 CLOSED

@nicopal
QEMU provides a means to obtain the launch measure of a VM which was previously calculated by the SEV firmware. See the QMP monitor and the query-sev-launch-measure command for reference. Note that the VM must be started with SEV support, the desired guest policy, launch blob, GODH and a QMP socket. Using the SEV-tool and its calculate_measurement command, you can compute the expected launch measure and compare the provided with the expected one.

When you want to inject a secret (e.g. a disk encryption passphrase) into the VM, the corresponding UEFI/bootloader must be capable of reading it out and actually use it, thus a custom image is required. This is more complex and involves the EDK II project/OVMF and grub patches. This article is a good reference.

To summarize: Parts are implemented but they have to be manually combined into a full protocol (afaik).

from amdsev.

Yes, it can be found in the SEV API spec (Secure Encrypted Virtualization API) on https://developer.amd.com/sev/

from amdsev.