In the following article ( http://wccftech.com/amd-zen-encryption-sme-sev-hw-based-sha/ ), it claims that SGX "cannot be virtualized".
- Can SGX-based software run in a virtual machine?
- If so, can I run SGX-based software(s) in different virtual machines on the same host concurrently?
- Furthermore, If SGX-based software can run in a virtual machine, which virtual machines can it run in? VirtualBox? VMWare Workstation? Xen?
don b. wrote:
I'm pretty sure SGX cannot currently be run from within a VM.
What do you mean by currently?
Is it that VM's do not support SGX today? or SGX cannot run in a VM at all?
Virtualization software must be able to support, i.e., virtualize the SGX hardware features (extensions to the IA-32 instruction set). As far as I know, no virtualization software (VMware, VirtualBox, Xen, etc) has virtualized SGX..... yet. Until that happens, you won't be able to run SGX in a VM.
Don B. is correct.
If you go to https://01.org/intel-softwareguard-extensions , you will see a link to https://01.org/intel-software-guard-extensions/sgx-virtualization. You should be able to find more details there.