Intel® Trust Domain Extension (Intel® TDX) Loader

738874
8/2/2022

Introduction

TDX Loader source code including instructions for reproducible build.

Available Downloads

  • Size: 2.7 MB
  • SHA1: D6D3C87A7FEBB0833ED5A77A14D01412E97D68D5

Detailed Description

Secure Arbitration Mode (SEAM) is an extension to Virtual Machines Extension (VMX) architecture to define a new VMX root mode called SEAM root.
This SEAM root mode is used to host a CPU-attested module to create virtual machine (VM) guests called Trust Domains (TD).

Software that executes in SEAM root mode, defined by SEAM range registers (SEAMRR).
The SEAM range is partitioned into two sub-ranges: MODULE_RANGE and P_SEAMLDR_RANGE.

The NP-SEAMLDR ACM helps with the initialization of the SEAM range, establishes the P-SEAMLDR range, sets up the SEAM transfer VMCS structure for transfers to the Intel P-SEAMLDR module, and loads the embedded Intel P-SEAMLDR module's image into the P_SEAMLDR_RANGE

The TDX module, which provides functions to build and manage TDs, is loaded to and runs from MODULE_RANGE.
The persistent SEAM loader (P-SEAMLDR), which provides function to load and update the TDX module, runs from P_SEAMLDR_RANGE.

P-SEAMLDR is a special SEAM module, loaded into P_SEAMLDR_RANGE by NP-SEAMLDR, and invoked by VMM using the SEAMCALL instruction.
It is designed to follow the steps below to load or update an Intel TDX module into the MODULE_RANGE:

  1. Verify input parameters, including the Intel TDX module's signature structure.
  2. Load the Intel TDX module image into the MODULE_RANGE, measure it and verify the measurement matches with the signature structure.
  3. Set up all the relevant regions and SEAM transfer VMCSs for all logical processors.
  4. Record the Intel TDX module identity into CPU measurement registers and update its load status.
  5. Return to VMM using the SEAMRET instruction.

For more details, refer - https://cdrdv2.intel.com/v1/dl/getContent/739045

The license is in the package.

Disclaimers1

Product and Performance Information

1

Intel is in the process of removing non-inclusive language from our current documentation, user interfaces, and code. Please note that retroactive changes are not always possible, and some non-inclusive language may remain in older documentation, user interfaces, and code.