[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Qemu-devel] [PATCH for-4.2 0/2] spapr: Implement H_TPM_COMM for accessi

From: Michael Roth
Subject: [Qemu-devel] [PATCH for-4.2 0/2] spapr: Implement H_TPM_COMM for accessing host TPM device
Date: Tue, 16 Jul 2019 18:53:11 -0500

These patches are based on ppc-for-4.2 and are also available at:


This patchset implements the H_TPM_COMM hypercall, which provides a way
for an Ultravisor to pass raw TPM commands on to a host's TPM device,
either directly or through a TPM Resource Manager (needed to support
multiple guests).

Secure Guests running on an Ultravisor have a symmetric key that is
encrypted using a public key that is bound to a trusted host's TPM
hardware. This hypercall provides a means to decrypt the symmetric
key on behalf of a Secure Guest using the host's TPM hardware.

More details are provided in the spec summary introduced in patch 1.

Changes since RFC/v0:
 - configure TPM path via -device spapr-tpm-proxy instead of -machine (David)
 - return H_FUNCTION (not H_RESOURCE) if TPM has not been configured (David)
 - drop use of global for storing TPM FD (David)
 - fix checkpatch errors relating to case statement indents, newlines in
   error_report(), and lines over 80.
 - fix some minor typos in documentation
 - rebased on ppc-for-4.2

 docs/specs/ppc-spapr-uv-hcalls.txt |  75 
 hw/ppc/Makefile.objs               |   1 +
 hw/ppc/spapr.c                     |  33 +++++++++++++++++++++++++++++++-
 hw/ppc/spapr_tpm_proxy.c           | 176 
 hw/ppc/trace-events                |   4 ++++
 include/hw/ppc/spapr.h             |   5 ++++-
 include/hw/ppc/spapr_tpm_proxy.h   |  31 ++++++++++++++++++++++++++++++
 7 files changed, 323 insertions(+), 2 deletions(-)

reply via email to

[Prev in Thread] Current Thread [Next in Thread]