Visible to Intel only — GUID: GUID-4415B896-E9B1-4C1E-BF42-6C8B59FC23AA
For API Level 1 - Intel® ME 7.x - Sandy Bridge
For API Level 1.1 - Intel® ME 8.x lite - Sandy Bridge
For API Level 2 - Intel® ME 8.0 - Ivy Bridge
For API Level 3 - Intel® ME 8.1 - Ivy Bridge
For API Level 3 - SEC1.0, SEC1.1, SEC1.2, SEC2.0
For API Level 4 - Intel® ME 9.5, Intel ME 9.5.55 - Haswell
For API Level 4 - Intel® ME 9.1, Intel ME 9.1.35 - Haswell
For API Level 5 - Intel® ME 10.0.0 - Haswell
For API Level 6 - Intel® ME 10.0.20 - Broadwell
For API Level 7 - ME 11.0 - Skylake_LP and Skylake_H
For API Level 8 - TXE3.0 - Broxton, ME 11.5/11.8 - Kabylake_LP, Kabylake_H
For API Level 9 - Intel® ME 12.0 - Cannon Lake
Trusted Application Validation Guidelines
Validating the Manifest
Memory and Performance
Error Handling and Recovery
Functional Validation and Multi-Instance Support
Pack and DALP Generation and Validation
Host-Side Software Validation Guidelines
Trusted Application Management Flows
Error Handling and Recovery Flows
Multi-Instance and Interoperability Testing of Trusted Application Management
General and Platform-Related Events
End-to-End and Setup Validation Guidelines
Cross Trusted Application Interoperability Functional Testing
Creating a New Project
Importing an Existing Project
Converting an Existing Project
Building and Packaging Your Project and Running in Emulated Environment
Running Your Project
Running and Testing on Emulation and on Silicon
Debugging Trusted Applications
Preparing and Submitting Your Project for Signing
Signing an Applet
Signing New Versions
Visible to Intel only — GUID: GUID-4415B896-E9B1-4C1E-BF42-6C8B59FC23AA
KDI Sample
This sample is a simple Linux host application that uses KDI (Kernel DAL Interface), an Intel® Dynamic Application Loader (Intel® DAL) Linux kernel module. (Supported on platforms running API level 8 and above.)
Note: You will be able to run the sample once a Linux kernel has been released containing KDI and Intel® Dynamic Application Loader (Intel® DAL) Test module.
Note: In the first release of the SDK, this sample is not included in the installer. It is located on the Intel DAL download page, under Related downloads. To access the download page, click the Download button on the Intel DAL home page.
The sample loads a trusted application into the Intel DAL virtual machine (VM), using the Intel® DAL Host Interface Service (JHI), and uses KDI to communicate with the trusted application.
Note: KDI is usually used by Linux modules in kernel space. This sample is run over user space to simplify its operation.
A typical use case is to create a kernel module to communicate with KDI.
The sample uses the Intel DAL test Linux module , which is compiled under the kernel configuration CONFIG_INTEL_MEI_DAL_TEST, to call the KDI APIs inside the kernel space. For details, refer to the test module code for kernel developer use.
Components
- Bist applet (simple echo applet)
- Intel DAL host application
Sample Flow
The sample does the following:
- Installs a trusted application. (See the java code in Bist.java. The application uses the compiled and signed trusted application.) The installation is performed from the user space, using teemanagement APIs.
- Uses KDI to open a session to the trusted application. The command is sent to KDI via the Intel DAL test module.
- Uses the trusted application's SendAndRecv function to send a command and receive data, using KDI via the Intel DAL test module.
- Uses KDI to close the session.
- Uses the Intel® DAL Host Interface Service (JHI) to uninstall the trusted application.
Running the Sample
To run the sample, do the following:
- Install CMake.
- Run the following inside the sample directory:
cmake .
make
This will create an executable file: kdi_sample.
3. Run the executable:
./kdi_sample