Visible to Intel only — GUID: GUID-347BD3A9-65E6-488D-AA90-49ED05887C65
For API Level 1 - Intel® ME 7.x - Sandy Bridge
For API Level 1.1 - Intel® ME 8.x lite - Sandy Bridge
For API Level 2 - Intel® ME 8.0 - Ivy Bridge
For API Level 3 - Intel® ME 8.1 - Ivy Bridge
For API Level 3 - SEC1.0, SEC1.1, SEC1.2, SEC2.0
For API Level 4 - Intel® ME 9.5, Intel ME 9.5.55 - Haswell
For API Level 4 - Intel® ME 9.1, Intel ME 9.1.35 - Haswell
For API Level 5 - Intel® ME 10.0.0 - Haswell
For API Level 6 - Intel® ME 10.0.20 - Broadwell
For API Level 7 - ME 11.0 - Skylake_LP and Skylake_H
For API Level 8 - TXE3.0 - Broxton, ME 11.5/11.8 - Kabylake_LP, Kabylake_H
For API Level 9 - Intel® ME 12.0 - Cannon Lake
Trusted Application Validation Guidelines
Validating the Manifest
Memory and Performance
Error Handling and Recovery
Functional Validation and Multi-Instance Support
Pack and DALP Generation and Validation
Host-Side Software Validation Guidelines
Trusted Application Management Flows
Error Handling and Recovery Flows
Multi-Instance and Interoperability Testing of Trusted Application Management
General and Platform-Related Events
End-to-End and Setup Validation Guidelines
Cross Trusted Application Interoperability Functional Testing
Creating a New Project
Importing an Existing Project
Converting an Existing Project
Building and Packaging Your Project and Running in Emulated Environment
Running Your Project
Running and Testing on Emulation and on Silicon
Debugging Trusted Applications
Preparing and Submitting Your Project for Signing
Signing an Applet
Signing New Versions
Visible to Intel only — GUID: GUID-347BD3A9-65E6-488D-AA90-49ED05887C65
Host-Applet Interface
Host applications communicate with trusted applications using the Intel® DAL Host Interface Service (Intel® DAL HIS) - a DLL whose API is used to install trusted applications and to establish sessions between a host application and a trusted application. A host application requests a trusted application to perform a function by invoking the Intel® DAL HIS function JHI_SendAndRecv2. The function call identifies the trusted application, the session and which trusted application function to invoke. It sends data when the trusted application function requires data. It returns a status and, when necessary, data.
The communication flow between the Intel® DAL HIS and the trusted application is a host-initiated "Send and Receive" model. The Intel DAL HIS sends a message (consisting of a command and data) to the trusted application. The trusted application executes the command and then sends back a return code and data. The Intel DAL HIS waits for and receives this data.
Intel DAL HIS also supports an event-driven approach. Trusted applications can communicate with host applications and with other trusted applications, and can initiate such communications. Applications can subscribe to an event type, to post an event either to all subscribers or to specific subscribers, and to determine the source of an event. This allows a host application to receive an event generated in a trusted application. For example, this mechanism can be used to enable a host application to receive timer interrupts from a trusted application based on Intel DAL firmware.
Note: There is no memory sharing mechanism between a trusted application and the host. The Intel® DAL HIS Application buffer size limitation is 2MB and will not accept a buffer larger than that.