Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support Genoa Platform #17

Open
mkulke opened this issue Apr 20, 2023 · 0 comments
Open

Support Genoa Platform #17

mkulke opened this issue Apr 20, 2023 · 0 comments
Labels

Comments

@mkulke
Copy link
Member

mkulke commented Apr 20, 2023

Current situation

Milan and Genoa use a different pair of ASK + ARK certificate chain. Milan is hardcoded (when requesting cert chain from AMD KDS). It makes for the time being, as the Azure CVM instances are Milan-based so far.

Impact

With the introduction of Genoa-Familiy instance types, KDS will be called with the wrong parameters fetched.

Ideal future situation

We provide forward compatibility for Genoa CPUs.

Implementation options

In the sev crate there is a platform detection heuristic (check which ASK signs the VCEK).

Additional information

This issue is mostly for tracking, it's not yet clear how CVM support would be implemented on Genoa instance types.

@mkulke mkulke added kind/enhancement New feature or request priority/Pfuture labels Apr 20, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant