Providing Confidential Guest Services with a Secure VM Service Module on AMD
summary
AMD implements an SVSM running at VMPL0 that provides confidential guest services like secure boot, a vTPM, and controlled live migration; the prototype is a Rust proof‑of‑concept that successfully boots OVMF multi‑vCPU Linux at VMPL1. KVM and QEMU gain vMSA per VMPL per vCPU support, a new GHCB event for VMPL transitions, RMP adjustments to create VMSA pages, and an attestation flow that measures only the BSP for simpler attestations. Live migration marks pages read‑only, transforms encrypted pages for transport, and uses SVSM attestation on the destination.
AI-written summary · about
chapters (14)
- 0:00Introduction
- 0:37Guest Security
- 0:58Guest Register State
- 2:30Integrity Protection
- 4:18VM Privilege Levels
- 5:53Creating an SVSM
- 8:21GHCB Event
- 10:12Boot Flow
- 15:19Live Migration
- 17:04Overview
- 18:16Virtual TPM
- 19:54Rust Version
- 21:15Linux SVSN
- 21:59Questions
related talks
20mSupporting Live Migration of Confidential VMs in KVM
11mTrusted in-guest hypervisor services with secure VM service module
15mRemote Attestation in AMD SEV-SNP Confidential VMs
23mHyper-V's Virtual Secure Mode in KVM project update
25mProtecting from MaliciousHypervisor Using AMD SEV-SNP
13mCOCONUT Secure VM Service Module Discussion
11mSecure TSC for AMD SEVSNP guests
45mSecuring Confidential VMs with COCONUT-SVSM