From 4ff4dcd9dd08c03f13468700ade08eeb2a662d62 Mon Sep 17 00:00:00 2001 From: Harika Date: Fri, 2 Aug 2024 21:06:27 +0000 Subject: [PATCH] README.md: New commands for snp status check on the host/guest Added new commands to read the dedicated host cpuid/guest msr to verify if SNP is on and supported on the host/guest Signed-off-by: Harika --- docs/snp.md | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/docs/snp.md b/docs/snp.md index aca8a12..f591e8d 100644 --- a/docs/snp.md +++ b/docs/snp.md @@ -52,6 +52,12 @@ wget https://github.com/amd/sev-utils/raw/main/tools/snp.sh chmod +x snp.sh ``` +Read the dedicated host cpuid Fn8000_001F[EAX] instruction set to verify if the SNP is on and supported on the host: +``` +./snp.sh check-host-snp-cpuid +``` + + Setup the host by building SNP patched versions of qemu, ovmf and the linux kernel: ``` ./snp.sh setup-host @@ -82,6 +88,10 @@ The `--non-upm` option can be specified with the above command if a non-upm vers of the kernel is desired. The `setup-host` command must be run with this same option if launching the guest with a non-upm kernel. +Read the dedicated guest MSR to determine if SNP is on and supported on the launched guest: +``` +./snp.sh check-guest-snp-msr +``` Attest the guest using the following command: ``` ./snp.sh attest-guest