AMD Virtual TPM Driver Merged For Linux 6.16 To Enhance Confidential Computing
The latest upstream Linux kernel improvement for AMD's Secure Encrypted Virtualization "SEV" is the introduction of a virtual TPM driver.
Last month I wrote about the AMD SEV-SNP SVSM vTPM driver being prepped and indeed this week it was submitted and subsequently merged for Linux 6.16. The x86/sev pull request for Linux 6.16 explains the purpose of this virtual TPM "vTPM" driver:
It's another step toward a nice Confidential Computing "CoCo" experience on modern AMD EPYC processors with the upstream Linux kernel.
The AMD SNP SVSM vTPM driver comes in at less than 400 lines of new code for Linux 6.16.
Last month I wrote about the AMD SEV-SNP SVSM vTPM driver being prepped and indeed this week it was submitted and subsequently merged for Linux 6.16. The x86/sev pull request for Linux 6.16 explains the purpose of this virtual TPM "vTPM" driver:
"Add a virtual TPM driver glue which allows a guest kernel to talk to a TPM device emulated by a Secure VM Service Module (SVSM) - a helper module of sorts which runs at a different privilege level in the SEV-SNP VM stack.
The intent being that a TPM device is emulated by a trusted entity and not by the untrusted host which is the default assumption in the confidential computing scenarios."
It's another step toward a nice Confidential Computing "CoCo" experience on modern AMD EPYC processors with the upstream Linux kernel.
The AMD SNP SVSM vTPM driver comes in at less than 400 lines of new code for Linux 6.16.