Visible to Intel only — GUID: GUID-7627F60F-339E-410D-9820-4B3BB484827B
For API Level 1 - Intel® ME 7.x - Sandy Bridge
For API Level 1.1 - Intel® ME 8.x lite - Sandy Bridge
For API Level 2 - Intel® ME 8.0 - Ivy Bridge
For API Level 3 - Intel® ME 8.1 - Ivy Bridge
For API Level 3 - SEC1.0, SEC1.1, SEC1.2, SEC2.0
For API Level 4 - Intel® ME 9.5, Intel ME 9.5.55 - Haswell
For API Level 4 - Intel® ME 9.1, Intel ME 9.1.35 - Haswell
For API Level 5 - Intel® ME 10.0.0 - Haswell
For API Level 6 - Intel® ME 10.0.20 - Broadwell
For API Level 7 - ME 11.0 - Skylake_LP and Skylake_H
For API Level 8 - TXE3.0 - Broxton, ME 11.5/11.8 - Kabylake_LP, Kabylake_H
For API Level 9 - Intel® ME 12.0 - Cannon Lake
Trusted Application Validation Guidelines
Validating the Manifest
Memory and Performance
Error Handling and Recovery
Functional Validation and Multi-Instance Support
Pack and DALP Generation and Validation
Host-Side Software Validation Guidelines
Trusted Application Management Flows
Error Handling and Recovery Flows
Multi-Instance and Interoperability Testing of Trusted Application Management
General and Platform-Related Events
End-to-End and Setup Validation Guidelines
Cross Trusted Application Interoperability Functional Testing
Creating a New Project
Importing an Existing Project
Converting an Existing Project
Building and Packaging Your Project and Running in Emulated Environment
Running Your Project
Running and Testing on Emulation and on Silicon
Debugging Trusted Applications
Preparing and Submitting Your Project for Signing
Signing an Applet
Signing New Versions
Visible to Intel only — GUID: GUID-7627F60F-339E-410D-9820-4B3BB484827B
DALPackageCreator Tool
The DALPackageCreator tool is used to combine multiple versions of your project into a single file, allowing you to deploy the same file on every platform that supports one of the versions.
An Intel® DAL package is a file with a .dalp extension. It contains a single trusted application, in one or more pack variations, corresponding to different firmware versions or/and different TA versions.
DALPackageCreator (also known as DALP) was created in order to create a DALP file from several PACK files.
The basic use cases for the Intel DAL DALP tool are:
- Create an initial DALP file that contains a single trusted application implementation.
- Edit or remove an existing DALP file.
The DALP file has many constraints that are checked in the client service which are verified by the DALP tool. Therefore, it is highly recommended to use the DALP tool in the creation or modification of a DALP file.
With the assistance of the Intel DAL Package Creator, you can:
- Create a new .dalp file or edit an existing one.
- Add new .pack files to the .dalp file.
- Remove old .pack files from the .dalp file.
- Explore the detailed manifest file of each pack included in the .dalp file.
- Export a .pack file included in the given .dalp to be a standalone .pack file.
The Intel DAL Package Creator has both a command line interface and GUI interface.
Command Line Interface
The command line interface receives the following arguments:
- -config
- -out
The -config argument is the name of the config file.
The config file specifies which trusted applications should be added to the Intel DAL package.
The Config file format is:
::Name <text, max 80 chars> ::Description <text, max 160 chars> ::Vendor <text, max 80 chars> ::Applet <path/to/pack/file.pack> ::FwVersion <Major.Minor.Hotfix>
Starting with Intel® Management Engine (Intel® ME) 11.0 (API level 7) the ::FwVersion value is 11.0.0 for all platforms in order to support Sign Once capability.
The Applet and FwVersion fields are mandatory. All other fields are optional.
The fields can appear in any order. ::Name, ::Description and ::Vendor can appear only once.
::Applet can appear multiple times, but must appear at least once.
All the trusted application files within the .dalp package must have the same UUID. The config file may contain empty lines and comment lines that start with a double backslash '//'.
The -out argument is the name of the output file. If the file already exists, items specified in the config file are appended to the existing one.
GUI Interface
The GUI interface enables the editing/creation of a .dalp file with the help of the following wizard:
First, choose your preferred option: create or edit a .dalp file, and browse to the .dalp file location.
Now you have the .dalp file location:
In this window there are all the .dalp file details: vendor, name, description and GUID. In addition, there is a clear list of all the .pack files included in this .dalp file.
Now you can edit your .dalp file:
- Add new .pack files to the .dalp file.
- Remove old .pack files from the .dalp file.
- Explore the detailed manifest file of each pack included in the .dalp file.
- Export a .pack file included in the given .dalp to be a standalone .pack file.
By double-clicking on a record of the .pack files table, or by selecting the wanted .pack file record and then clicking on the "Details" button, a window with the details of the selected .pack TA is opened:
When you finish editing the .dalp file, click Done and view the activity status: