Skip to content

Commit

Permalink
Update README.md
Browse files Browse the repository at this point in the history
Updated documentation to add commands for:
   1. Verification of SNP support on the host processor via SNP bit status from the instruction set CPUID Fn8000_001F[EAX]
   2. Verification of SNP status on the lauched guest from SEV_STATUS MSR Address

Signed-off-by: Harika <[email protected]>
  • Loading branch information
LakshmiSaiHarika committed Aug 2, 2024
1 parent 2de28ce commit 5f99f1e
Showing 1 changed file with 10 additions and 0 deletions.
10 changes: 10 additions & 0 deletions docs/snp.md
Original file line number Diff line number Diff line change
Expand Up @@ -51,6 +51,11 @@ Download the script and add the execute permission:
wget https://github.com/amd/sev-utils/raw/main/tools/snp.sh
chmod +x snp.sh
```
Verify if the host processor supports SEV, SEV-ES and SNP feautures by checking the host SEV, SEV-ES and SNP bit status from the instruction set CPUID Fn8000_001F[EAX] :
```
./snp.sh check-snp-on-host-msr
```


Setup the host by building SNP patched versions of qemu, ovmf and the linux kernel:
```
Expand Down Expand Up @@ -82,6 +87,11 @@ The `--non-upm` option can be specified with the above command if a non-upm vers
of the kernel is desired. The `setup-host` command must be run with this same option
if launching the guest with a non-upm kernel.

Verify if the guest is SNP active by checking the guest SEV, SEV-ES and SNP bit status from SEV_STATUS MSR Address:
```
./snp.sh check-snp-on-guest-msr
```

Attest the guest using the following command:
```
./snp.sh attest-guest
Expand Down

0 comments on commit 5f99f1e

Please sign in to comment.