4 ms·
In theory the PSP should probably attest the microcode but I don't know if that exists.
by wmf 2y ago
In theory the PSP should probably attest the microcode but I don't know if that exists.
- bpye 2y agoSEV-SNP VMs can obtain an attestation report [0]. [0] - https://www.amd.com/content/dam/amd/en/documents/epyc-technical-docs/specifications/56860.pdf https://www.amd.com/content/dam/amd/en/documents/epyc-techni...
- anon2025b 2y agoWhat does it actually attest though? The running microcode's revision ID? Or the running microcode's ROM version plus loaded patch lines plus active match registers plus whatever settings were adjusted in config registers during the act of loading? That is, attest the actual and complete config that is running, or some pointless subset that instills a false sense of security? It would be good for AMD (and Intel etc.) to provide better details here.