4 ms·
That's the point where you'd need the VM itself to be attested for it to work. Hyper-V kinda does it already with Shielded Windows VMs. With the advent of SEV,
by Avamander 3y ago
That's the point where you'd need the VM itself to be attested for it to work. Hyper-V kinda does it already with Shielded Windows VMs.
With the advent of SEV, you won't even be able to look at the stuff your hypervisor is running.
- fsniper 3y agoAlso there is no guarantee that "attestation" won't require your software to run on the physical hardware and not on a vm.
- Avamander 3y agoTrue, but virtualization is big enough (including Microsoft's own Windows365 offerings) that passing "trust" down into VMs will be done. And with SEV there isn't even a way to tamper with things after the attestation process has been completed.