Virtual Firmware for Intel Trust Domain Extensions

Virtual Firmware for Intel Trust Domain Extensions

Intel® Trust Domain Extensions (Intel® TDX) introduce architectural elements to help deploy hardware-isolated, virtual machines (VMs) called trust domains (TDs). Intel TDX is designed to isolate VMs from the virtual-machine manager (VMM)/hypervisor and any other non-TD software on the platform to protect TDs from a broad range of software.

This presentation introduces the architecture for TDX Virtual Firmware (TDVF), and the firmware reference implementation available in open source. The talk covers how TDVF runs from the TD reset vector, records runtime measurements, manages private memory, interacts with the Intel TDX module in Secure Arbitration Mode (SEAM), and loads the operating system (OS).

Learn more about the UEFI Forum: https://uefi.org/
Presentation slides: https://bit.ly/2KfbnFr

Follow the UEFI Forum
Twitter: https://twitter.com/UEFIForum
LinkedIn: https://www.linkedin.com/company/uefi-forum

Share this...

Facebook

Twitter

Pinterest

Linkedin

Reddit

Stumbleupon

Diggit

Tumblr

Email