Using SGX in Virtual Machines

[clinton_b_]

In the following article ( http://wccftech.com/amd-zen-encryption-sme-sev-hw-based-sha/ ), it claims that SGX "cannot be virtualized". 

1. Can SGX-based software run in a virtual machine?  
2. If so, can I run SGX-based software(s) in different virtual machines on the same host concurrently?
3. Furthermore, If SGX-based software can run in a virtual machine, which virtual machines can it run in?  VirtualBox? VMWare Workstation? Xen?

Thanks,

Clinton

[ddon]

I'm pretty sure SGX cannot currently be run from within a VM.

[clinton_b_]

don b. wrote:

I'm pretty sure SGX cannot currently be run from within a VM.

What do you mean by currently?  

Is it that VM's do not support SGX today? or  SGX cannot run in a VM at all? 

[ddon]

Virtualization software must be able to support, i.e., virtualize the SGX hardware features (extensions to the IA-32 instruction set). As far as I know, no virtualization software (VMware, VirtualBox, Xen, etc) has virtualized SGX..... yet. Until that happens, you won't be able to run SGX in a VM.

[Francisco_C_Intel]

Don B. is correct.

If you go to https://01.org/intel-softwareguard-extensions , you will see a link to https://01.org/intel-software-guard-extensions/sgx-virtualization. You should be able to find more details there.

[Thomas_L_5]

Thank you everyone for the information!

[Motta__Gilson]

As of right now, there is SGX virtualization is available for KVM and Xen.