AMD SEV-SNP Attestation: Establishing Trust in Guests

on YouTube ↗47m

" summary

SEV‑SNP produces a signed attestation report that lets a guest owner release secrets only after verifying concrete measurements: a committed TCB plus current/reported TCBs, chip ID and platform bits, a launch digest built page‑by‑page, and the guest‑owner‑signed ID block (image ID, policy, ID key fingerprint). The report is signed by a chip‑unique, versioned VCEK obtained from a key service; a secure SP↔guest channel delivers it and can bind an ephemeral guest key (in report data). Host tools expose this via Dev SEV get_report / get_extended_report.

AI-written summary · about

" chapters (11)

1. 0:00Intro
2. 0:25AMD SEV-SNP Overview
3. 1:31Threat Model - Untrusted Cloud Provider
4. 6:35AMD SEV-SNP Attestation
5. 7:24Measurements of Trusted Computing Base (TCB)
6. 14:35Attestation Report: Platform Measurements
7. 18:36Attestation Report: Guest Measurements
8. 29:27Authenticity of Attestation Report
9. 30:39Binding Guest Credentials to Attestation Report
10. 32:53Retrieving Attestation Reports
11. 40:10TCB Version Tracking

" related talks

• 25mDemystifying remote attestationAndras Slemmer, Gaëtan Wattiau · OC3 2023
• 41mUnifying Confidential AttestationDov Murik, Tobin Feldman-Fitzthum · KVM Forum 2022
• 15mRemote Attestation in AMD SEV-SNP Confidential VMsClaudio Carvalho · Linux Plumbers Conference 2023
• 11mSecure TSC for AMD SEVSNP guestsNikunj Dadhani · Linux Plumbers Conference 2023
• 17mHow to Build a Confidential Attestation ClientTobin Feldman-Fitzthum · Linux Plumbers Conference 2023
• 25mProtecting from MaliciousHypervisor Using AMD SEV-SNPBrijesh Singh · KVM Forum 2021
• 23mAMD SEV & Azure Local: When Confidential VMs Go LocalD. Harmon, D. Manohar · Confidential Computing Summit 2026
• 22mUsing DICE Attestation for SEV and SNP Hardware Rooted AttestationPeter Gonda · Linux Plumbers Conference 2022