topic Re:SGX VM support in Intel® Software Guard Extensions (Intel® SGX)

SGX VM support

Anandakumar — Thu, 15 Jul 2021 07:33:23 GMT

Hi Team,

I came across the SGX KVM and SGX QEMU that are needed to support the SGX Virtualization.

SGX QEMU is still in the development, So how production deployments are done so far? Everything on physical host server or any alternative Virtualization I am missing out?

Thanks,

Anand

Re:SGX VM support

JesusG_Intel — Fri, 16 Jul 2021 14:58:09 GMT

Hello Anand,

KVM support is now officially upstreamed as of kernel 5.13. The official QEMU pull request is ready to go, delayed only by some other patches soon to be pulled in by the QEMU maintainer. Folks using it right now, are using the SGX-QEMU GitHub source. A good article on this here.

VMWare ESXi already has “vSGX” support.

SGX can also be enabled in Hyper-V guest VMs, which is what Azure uses.

Sincerely,

Jesus G.

Intel Customer Support

Re:SGX VM support

JesusG_Intel — Mon, 19 Jul 2021 19:05:05 GMT

This thread has been marked as answered and Intel will no longer monitor this thread. If you want a response from Intel in a follow-up question, please open a new thread.