Trusted in-guest hypervisor services with secure VM service module
summary
A prototype Secure VM Service Module runs inside the guest TEE using VMPLs to move hypervisor functionality into the confidential guest context. It implements an emulated TPM inside the secure guest and a trusted live migration service that copies pages, migrates CPU state and encrypts destination state so secrets never leave the TEE. The implementation integrates with existing AMD confidential computing features and demonstrates feasibility as a low-level trusted service.
AI-written summary · about
chapters (8)
- 0:00Introduction to talk
- 0:24SVSM overview and use cases
- 1:36Security challenges with TPM
- 3:04Firmware simplification with SVSM
- 5:21Memory mapping and security
- 7:26Next implementation steps
- 9:05Protected mode and launch process
- 10:29Talk conclusion and vision
related talks
28mProviding Confidential Guest Services with a Secure VM Service Module on AMD
15mRemote Attestation in AMD SEV-SNP Confidential VMs
19mSupporting Trusted Virtual Machines with Hardware-based Secure Remote Memory
13mVM Security with Confidential Computing
36mConfidential VMs in the cloud
26mHypervisor Based Integrity: Protect Guest Kernel in Cloud
20mIntel Virtualization Technology Extensions to Enable Hardware Isolated VMs
41mUnifying Confidential Attestation