Visible to Intel only — GUID: GUID-14BED292-6F03-433C-84F1-95463FD4E4DE
For API Level 1 - Intel® ME 7.x - Sandy Bridge
For API Level 1.1 - Intel® ME 8.x lite - Sandy Bridge
For API Level 2 - Intel® ME 8.0 - Ivy Bridge
For API Level 3 - Intel® ME 8.1 - Ivy Bridge
For API Level 3 - SEC1.0, SEC1.1, SEC1.2, SEC2.0
For API Level 4 - Intel® ME 9.5, Intel ME 9.5.55 - Haswell
For API Level 4 - Intel® ME 9.1, Intel ME 9.1.35 - Haswell
For API Level 5 - Intel® ME 10.0.0 - Haswell
For API Level 6 - Intel® ME 10.0.20 - Broadwell
For API Level 7 - ME 11.0 - Skylake_LP and Skylake_H
For API Level 8 - TXE3.0 - Broxton, ME 11.5/11.8 - Kabylake_LP, Kabylake_H
For API Level 9 - Intel® ME 12.0 - Cannon Lake
Trusted Application Validation Guidelines
Validating the Manifest
Memory and Performance
Error Handling and Recovery
Functional Validation and Multi-Instance Support
Pack and DALP Generation and Validation
Host-Side Software Validation Guidelines
Trusted Application Management Flows
Error Handling and Recovery Flows
Multi-Instance and Interoperability Testing of Trusted Application Management
General and Platform-Related Events
End-to-End and Setup Validation Guidelines
Cross Trusted Application Interoperability Functional Testing
Creating a New Project
Importing an Existing Project
Converting an Existing Project
Building and Packaging Your Project and Running in Emulated Environment
Running Your Project
Running and Testing on Emulation and on Silicon
Debugging Trusted Applications
Preparing and Submitting Your Project for Signing
Signing an Applet
Signing New Versions
Visible to Intel only — GUID: GUID-14BED292-6F03-433C-84F1-95463FD4E4DE
Eclipse* Plugin
The Intel® DAL plugin to the Eclipse* IDE allows you to easily develop your Intel DAL projects. The plugin extends the Eclipse capabilities, making it the recommended development environment. Using the plugin, you can easily create new Intel DAL projects and import existing projects into the Intel DAL framework. The plugin for Eclipse integrates with other development tools in the SDK. From the Eclipse IDE, you can run the Intel DAL Emulauncher to test your projects in an emulated environment and run the Intel DAL Generic Host Application to test your trusted applications without needing to develop a host application.
The plugin is installed automatically with the SDK. See SDK system requirements for more details on supported Eclipse versions.
The standalone installer for the Eclipse plugin is located in the SDK's installation directory at \DALsdk\Plugins\Eclipse\DAL_JDE_Plugin_Installer.exe. You will need this installer if you need to reinstall Eclipse at a later date.
The plugin adds an Intel DAL menu and three icons to the Eclipse ribbon.
Intel® DAL Menu
- Build and Package - build and package a trusted application for installation by a host application in a real or emulated environment.
- Prepare Applet for signing - prepare a trusted application package and all of its collateral files into a single zip file to be sent to Intel for signing.
- Connect to Intel DAL debugger - connect to a currently running session to begin debugging.
- Troubleshooter - opens Troubleshooter log to view any Intel DAL environment issues.
Intel® DAL Icons
Build and Package- Connect to Intel DAL debugger
- Troubleshooter
The Intel DAL plugin also added two options to the Eclipse File ->New ->Project menu:
- DAL Applet Project - for creating new projects.
- DAL Unit Project - for importing existing projects for unit testing.
An Intel DAL project created in Eclipse includes a src folder, a Referenced Libraries folder and a Manifest folder.
Creating a Project
The Intel DAL Eclipse plugin makes it easy to start a new Intel DAL project. The Intel DAL plugin creates the necessary files for the development of both a trusted application as well as a host application. A project is created for the selected API level and a manifest is created for each platform which supports the selected API level. Therefore, a single project can have several manifest files. For existing projects, new platform support can be added by using the Upgrade function in the Upgrade Project wizard. Platform support can be removed from a project by deleting the platform manifest file from the manifest folder in the Eclipse Package Explorer window.
Building and Packaging
To enable using your applet, you need to compile it into an installable package. The Eclipse plugin's Build and Package DAL Object action compiles the applet and creates a single .dalp file, which contains a PACK file for each platform supported in the project.
Output from the build process is displayed on the Eclipse console.
For details, see Building and Packaging Your Project and Running in Emulated Environment
Running and Debugging
The run configuration is set initially in the New Project wizard. This configuration can be (re)configured any time in a project by right clicking the project and selecting Properties->DAL Project Properties.The DALjde plug-in is configured to run automatically and correctly and debug a trusted application. This is accomplished by automatically configuring and launching the Emulauncher utility and selected Host Application. When a project is run it creates a single .dalp file which contains a PACK file for each platform supported in the project.
This functionality is configured in the Eclipse Run Configurations.
The trusted application is run in this environment via the standard Eclipse Run icon.
Launching the trusted application run in this way initiates the following steps:
- Creates the appropriate installable package necessary for the particular run.
- Starts the Emulauncher application. Emulauncher runs the emulation suited to the project's currently active manifest.
- Depending on the Run Configuration settings, does one of the following:
- Starts the appropriate Generic Host interface
- Starts a custom executable
- Opens Microsoft Visual Studio* with the selected solution and runs it.
- If the Generic Host Application is selected, it installs the trusted application and starts a session. The behavior of the other options is implementation defined.
Note: The following capabilities are relevant for running the trusted application in an emulated environment. The SDK allows for running on "real" silicon based firmware, however some functionality (output display, source level debugging) is not available.
For debugging the project, all regular Eclipse debugging options are available in an emulated environment. To enable debugging the applet, it should be compiled to debug: In the build wizard, check the For Debugger box:
Then run the host normally. When the applet meets a break point, it waits for you to use the Connect to Debugger button to start debugging. All of the output can be viewed in Microsoft* Visual Studio, Eclipse, and the Intel DAL Generic Host Application console panes.
For information on debugging, see Debugging Trusted Applications
Intel® DAL Manifest Editor
Included in each Intel DAL project is the project's Intel DAL manifest.The manifest can be edited in Eclipse with the Intel DAL Manifest Editor. Double click on a manifest to open it for editing. See Trusted Application Manifest for more details on Intel DAL manifest fields, including details on the manifest field values for Intel CPUs and PCH SKUs. The Intel DAL Manifest Editor checks the validity of each manifest field value in real time and will not let you run a project with an illegal manifest. For example, the Eclipse Plugin will not let you run a project with Intel DAL Manifest that contains a CPU or PCH whitelist with values which do not coordinate with the Intel DAL API level you have chosen for your project.
The Manifest Editor displays all manifests in the project and marks the currently active manifest. Right-click on a manifest and select Set as Active to change the currently active manifest.
Note: The active manifest specifies the emulation version that should be used when the project is run. This setting is required because platforms that cannot be emulated (currently SEC) cannot be set as active.
The Manifest Editor has two panes: Platform Manifest Settings and Non-Platform Manifest Settings. Changes in Platform Manifest Settings are unique to each manifest. A change to Non-Platform Manifest Settings in one manifest will be executed across all manifests in the project by default.
Prepare for Signing
The Prepare for Signing functionality of the Intel DAL plugin to Eclipse is a powerful yet easy-to-use interface for bundling all of the required files, reports and scripts required by Intel into a single zip file. See Signing Your Applet for more details on the Intel DAL trusted application signing process. If your project supports more than one platform, you can select which PACK files you want to be signed by Intel.
Upgrading a Project
By default, when a project is created, manifests for all supported platforms for the selected API level are created. You can subsequently upgrade the project to include support for platforms with higher API levels.
To add support for platforms with higher API levels:
- Right-click the project and choose Upgrade DAL Project. The Upgrade Project wizard opens.
- Choose the additional platform that you want the project to support and click Finish. The wizard completes the upgrade process.
- To add additional projects, repeat Steps 1 and 2.
The Manifests folder in the Package Explorer includes a manifest for each of the supported platforms.
To remove support for a platform, remove the platform's manifest from the Manifests folder.