debian forky SEV version 3.0-0

[DGonzalezVillal]

====== SEV CERTIFICATE ======

SEV VERSION: 3.0-0

=== TEST ENVIRONMENT DETAILS ===

Host Environment Details:
Host Operating System: Debian GNU/Linux forky/sid
OVMF Version: 2025.02-9
QEMU Version: 1:10.1.2+ds-3+b1
Host Kernel Version: 6.17.11+deb14-amd64

Guest Environment Details:
Guest Operating System: Debian GNU/Linux forky/sid
Guest Kernel version: 6.17.11+deb14-amd64

=== SUMMARY ===

[ ✅ ] SEV VERSION 3.0-0 SNP HOST TESTS
✅ calculate-measurement.service : Calculate guest measurement...
✅ snphost-ok.service : Run snphost ok to make sure host is correctly set-up for SNP functionalities....
✅ verify-guest.service : Verify the SEV-SNP guest booted correctly...
✅ display-guest-logs.service : Show the guest logs for the appropriate services in the host...

[ ✅ ] SEV VERSION 3.0-0 SNP GUEST TESTS
✅ snpguest-ok.service : Run snguest ok to verify SNP enablement on guest...
✅ snpguest-attestation.service : Run SNP Regular Attestation after boot...
✅ Generation of SNP Guest Report
✅ Fetch of CA certificate chain
✅ Fetch of VCEK certificate chain
✅ Verification of ARK, ASK and VCEK cert-chain
✅ Verification of SNP Attestation Report
✅ Display of SNP Attestation Report

=== SEV VERSION 3.0-0 LOG ===
Dec 19 18:06:21 systemd[1]: Starting calculate-measurement.service - Calculate guest measurement...
Dec 19 18:06:21 guest_measurement.sh[1839]: 0xd7821a32e571c030a22b00f0c7ae6609fab040022c00dd6facc86ce1af4d54f63d5c8ae2eb1554887c16ba74f24fc5e7
Dec 19 18:06:21 systemd[1]: Starting snphost-ok.service - Run snphost ok to make sure host is correctly set-up for SNP functionalities....
Dec 19 18:06:21 systemd[1]: calculate-measurement.service: Deactivated successfully.
Dec 19 18:06:21 systemd[1]: Finished calculate-measurement.service - Calculate guest measurement.
Dec 19 18:06:21 systemd[1]: calculate-measurement.service: Consumed 182ms CPU time over 234ms wall clock time, 196.4M memory peak.
Dec 19 18:06:21 snphost[1968]: [ PASS ] - AMD CPU
Dec 19 18:06:21 snphost[1968]: [ PASS ] - Microcode support
Dec 19 18:06:21 snphost[1968]: [ PASS ] - Secure Memory Encryption (SME)
Dec 19 18:06:21 snphost[1968]: [ PASS ] - SME: Enabled in MSR
Dec 19 18:06:21 snphost[1968]: [ PASS ] - Secure Encrypted Virtualization (SEV)
Dec 19 18:06:21 snphost[1968]: [ PASS ] - SEV firmware version: 1.55
Dec 19 18:06:21 snphost[1968]: [ PASS ] - Encrypted State (SEV-ES)
Dec 19 18:06:21 snphost[1968]: [ PASS ] - SEV-ES initialized
Dec 19 18:06:21 snphost[1968]: [ PASS ] - SEV initialized: Initialized, no guests running
Dec 19 18:06:21 snphost[1968]: [ PASS ] - Secure Nested Paging (SEV-SNP)
Dec 19 18:06:21 snphost[1968]: [ PASS ] - VM Permission Levels
Dec 19 18:06:21 snphost[1968]: [ PASS ] - Number of VMPLs: 4
Dec 19 18:06:21 snphost[1968]: [ PASS ] - SNP: Enabled in MSR
Dec 19 18:06:21 systemd[1]: Starting verify-guest.service - Verify the SEV-SNP guest booted correctly...
Dec 19 18:06:21 snphost[1968]: [ PASS ] - SNP initialized
Dec 19 18:06:21 snphost[1968]: [ PASS ] - RMP table addresses: 0x7ffe500000 - 0x807edfffff
Dec 19 18:06:21 snphost[1968]: [ PASS ] - RMP table initialized
Dec 19 18:06:21 snphost[1968]: [ PASS ] - Alias check: Completed since last system update, no aliasing addresses
Dec 19 18:06:21 snphost[1968]: [ PASS ] - Physical address bit reduction: 5
Dec 19 18:06:21 snphost[1968]: [ PASS ] - C-bit location: 51
Dec 19 18:06:21 snphost[1968]: [ PASS ] - Number of encrypted guests supported simultaneously: 509
Dec 19 18:06:21 snphost[1968]: [ PASS ] - Minimum ASID value for SEV-enabled, SEV-ES disabled guest: 100
Dec 19 18:06:21 snphost[1968]: [ PASS ] - /dev/sev readable
Dec 19 18:06:21 snphost[1968]: [ PASS ] - /dev/sev writable
Dec 19 18:06:21 snphost[1968]: [ PASS ] - Page flush MSR: ENABLED
Dec 19 18:06:21 snphost[1968]: [ PASS ] - KVM supported: API version: 12
Dec 19 18:06:21 snphost[1968]: [ PASS ] - SEV enabled in KVM
Dec 19 18:06:21 snphost[1968]: [ PASS ] - SEV-ES enabled in KVM
Dec 19 18:06:21 snphost[1968]: [ PASS ] - SEV-SNP enabled in KVM
Dec 19 18:06:21 snphost[1968]: [ PASS ] - Memlock resource limit: Soft: 8388608 | Hard: 8388608
Dec 19 18:06:21 snphost[1968]: [ PASS ] - Comparing TCB values: TCB versions match
Dec 19 18:06:21 snphost[1968]: Platform TCB version: TCB Version:
Dec 19 18:06:21 snphost[1968]: Microcode: 219
Dec 19 18:06:21 snphost[1968]: SNP: 25
Dec 19 18:06:21 snphost[1968]: TEE: 0
Dec 19 18:06:21 snphost[1968]: Boot Loader: 4
Dec 19 18:06:21 snphost[1968]: FMC: None
Dec 19 18:06:21 snphost[1968]: Reported TCB version: TCB Version:
Dec 19 18:06:21 snphost[1968]: Microcode: 219
Dec 19 18:06:21 snphost[1968]: SNP: 25
Dec 19 18:06:21 snphost[1968]: TEE: 0
Dec 19 18:06:21 snphost[1968]: Boot Loader: 4
Dec 19 18:06:21 snphost[1968]: FMC: None
Dec 19 18:06:21 systemd[1]: snphost-ok.service: Deactivated successfully.
Dec 19 18:06:21 systemd[1]: Finished snphost-ok.service - Run snphost ok to make sure host is correctly set-up for SNP functionalities..
Dec 19 18:06:34 verify-guest.sh[1974]: Guest boot successful.
Dec 19 18:06:34 systemd[1]: verify-guest.service: Deactivated successfully.
Dec 19 18:06:34 systemd[1]: Finished verify-guest.service - Verify the SEV-SNP guest booted correctly.
Dec 19 18:06:34 systemd[1]: Starting display-guest-logs.service - Show the guest logs for the appropriate services in the host...
Dec 19 18:06:35 display-guest-logs.sh[2036]: SEV-SNP guest test results:
Dec 19 18:06:35 display-guest-logs.sh[2036]: For more information check journals in /var/log/journal/guest-logs
Dec 19 18:06:35 display-guest-logs.sh[2036]: Starting snpguest-ok.service - Run snguest ok to verify SNP enablement on guest...
Dec 19 18:06:35 display-guest-logs.sh[2036]: [ PASS ] - SEV: ENABLED
Dec 19 18:06:35 display-guest-logs.sh[2036]: [ PASS ] - SEV-ES: ENABLED
Dec 19 18:06:35 display-guest-logs.sh[2036]: [ PASS ] - SNP: ENABLED
Dec 19 18:06:35 display-guest-logs.sh[2036]: [ PASS ] - Optional Features statuses:
Dec 19 18:06:35 display-guest-logs.sh[2036]: [ PASS ] - VTOM: DISABLED
Dec 19 18:06:35 display-guest-logs.sh[2036]: [ PASS ] - ReflectVC: DISABLED
Dec 19 18:06:35 display-guest-logs.sh[2036]: [ PASS ] - Restricted Injection: DISABLED
Dec 19 18:06:35 display-guest-logs.sh[2036]: [ PASS ] - Alternate Injection: DISABLED
Dec 19 18:06:35 display-guest-logs.sh[2036]: [ PASS ] - Debug Swap: DISABLED
Dec 19 18:06:35 display-guest-logs.sh[2036]: [ PASS ] - Prevent Host IBS: DISABLED
Dec 19 18:06:35 display-guest-logs.sh[2036]: [ PASS ] - SNP BTB Isolation: DISABLED
Dec 19 18:06:35 display-guest-logs.sh[2036]: [ PASS ] - VMPL SSS: DISABLED
Dec 19 18:06:35 display-guest-logs.sh[2036]: [ PASS ] - Secure TSE: DISABLED
Dec 19 18:06:35 display-guest-logs.sh[2036]: [ PASS ] - VMG Exit Parameter: DISABLED
Dec 19 18:06:35 display-guest-logs.sh[2036]: [ PASS ] - VMG Exit Parameter: DISABLED
Dec 19 18:06:35 display-guest-logs.sh[2036]: [ PASS ] - IBS Virtualization: DISABLED
Dec 19 18:06:35 display-guest-logs.sh[2036]: [ PASS ] - VMSA Reg Prot: DISABLED
Dec 19 18:06:35 display-guest-logs.sh[2036]: [ PASS ] - SMT Protection: DISABLED
Dec 19 18:06:35 display-guest-logs.sh[2036]: snpguest-ok.service: Deactivated successfully.
Dec 19 18:06:35 display-guest-logs.sh[2036]: Finished snpguest-ok.service - Run snguest ok to verify SNP enablement on guest.
Dec 19 18:06:35 display-guest-logs.sh[2036]: Perform Regular Attestation workflow using snpguest tool ...
Dec 19 18:06:35 display-guest-logs.sh[2036]: Starting snpguest-attestation.service - Run SNP Regular Attestation after boot...
Dec 19 18:06:35 display-guest-logs.sh[2036]: The AMD ARK was self-signed!
Dec 19 18:06:35 display-guest-logs.sh[2036]: The AMD ASK was signed by the AMD ARK!
Dec 19 18:06:35 display-guest-logs.sh[2036]: The VCEK was signed by the AMD ASK!
Dec 19 18:06:35 display-guest-logs.sh[2036]: Reported TCB Boot Loader from certificate matches the attestation report.
Dec 19 18:06:35 display-guest-logs.sh[2036]: Reported TCB TEE from certificate matches the attestation report.
Dec 19 18:06:35 systemd[1]: display-guest-logs.service: Deactivated successfully.
Dec 19 18:06:35 display-guest-logs.sh[2036]: Reported TCB SNP from certificate matches the attestation report.
Dec 19 18:06:35 display-guest-logs.sh[2036]: Reported TCB Microcode from certificate matches the attestation report.
Dec 19 18:06:35 display-guest-logs.sh[2036]: VEK signed the Attestation Report!
Dec 19 18:06:35 display-guest-logs.sh[2036]: Attestation Report:
Dec 19 18:06:35 display-guest-logs.sh[2036]: Version: 4
Dec 19 18:06:35 display-guest-logs.sh[2036]: Guest SVN: 0
Dec 19 18:06:35 display-guest-logs.sh[2036]: Guest Policy (0x30000):
Dec 19 18:06:35 display-guest-logs.sh[2036]: ABI Major: 0
Dec 19 18:06:35 display-guest-logs.sh[2036]: ABI Minor: 0
Dec 19 18:06:35 display-guest-logs.sh[2036]: SMT Allowed: true
Dec 19 18:06:35 display-guest-logs.sh[2036]: Migrate MA: false
Dec 19 18:06:35 display-guest-logs.sh[2036]: Debug Allowed: false
Dec 19 18:06:35 display-guest-logs.sh[2036]: Single Socket: false
Dec 19 18:06:35 display-guest-logs.sh[2036]: CXL Allowed: false
Dec 19 18:06:35 display-guest-logs.sh[2036]: AEX 256 XTS: false
Dec 19 18:06:35 display-guest-logs.sh[2036]: RAPL Allowed: false
Dec 19 18:06:35 display-guest-logs.sh[2036]: Ciphertext hiding: false
Dec 19 18:06:35 display-guest-logs.sh[2036]: Page Swap Disable: false
Dec 19 18:06:35 display-guest-logs.sh[2036]: Family ID:
Dec 19 18:06:35 display-guest-logs.sh[2036]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 19 18:06:35 display-guest-logs.sh[2036]: Image ID:
Dec 19 18:06:35 display-guest-logs.sh[2036]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 19 18:06:35 display-guest-logs.sh[2036]: VMPL: 1
Dec 19 18:06:35 display-guest-logs.sh[2036]: Signature Algorithm: 1
Dec 19 18:06:35 display-guest-logs.sh[2036]: Current TCB:
Dec 19 18:06:35 display-guest-logs.sh[2036]: TCB Version:
Dec 19 18:06:35 display-guest-logs.sh[2036]: Microcode: 219
Dec 19 18:06:35 display-guest-logs.sh[2036]: SNP: 25
Dec 19 18:06:35 display-guest-logs.sh[2036]: TEE: 0
Dec 19 18:06:35 display-guest-logs.sh[2036]: Boot Loader: 4
Dec 19 18:06:35 display-guest-logs.sh[2036]: FMC: None
Dec 19 18:06:35 display-guest-logs.sh[2036]: Platform Info (39):
Dec 19 18:06:35 display-guest-logs.sh[2036]: SMT Enabled: true
Dec 19 18:06:35 display-guest-logs.sh[2036]: TSME Enabled: true
Dec 19 18:06:35 display-guest-logs.sh[2036]: ECC Enabled: true
Dec 19 18:06:35 display-guest-logs.sh[2036]: RAPL Disabled: false
Dec 19 18:06:35 display-guest-logs.sh[2036]: Ciphertext Hiding Enabled: false
Dec 19 18:06:35 display-guest-logs.sh[2036]: Alias Check Complete: true
Dec 19 18:06:35 display-guest-logs.sh[2036]: SEV-TIO Enabled: false
Dec 19 18:06:35 display-guest-logs.sh[2036]: Key Information:
Dec 19 18:06:35 display-guest-logs.sh[2036]: author key enabled: false
Dec 19 18:06:35 display-guest-logs.sh[2036]: mask chip key: false
Dec 19 18:06:35 display-guest-logs.sh[2036]: signing key: vcek
Dec 19 18:06:35 display-guest-logs.sh[2036]: Report Data:
Dec 19 18:06:35 display-guest-logs.sh[2036]: 37 8B A7 DD D2 83 E2 08 B7 DD 49 26 B1 1B 93 10
Dec 19 18:06:35 display-guest-logs.sh[2036]: 3A 60 02 50 87 CF 89 A7 FE AF 52 D9 36 4D 9C BD
Dec 19 18:06:35 display-guest-logs.sh[2036]: 04 A1 7E 63 C9 3D D8 9A 5C 70 BA 7F CD 19 8E CE
Dec 19 18:06:35 display-guest-logs.sh[2036]: 7A 5C 93 17 74 5E 29 5B 0C 41 AF BF A3 5B 82 81
Dec 19 18:06:35 display-guest-logs.sh[2036]: Measurement:
Dec 19 18:06:35 display-guest-logs.sh[2036]: D7 82 1A 32 E5 71 C0 30 A2 2B 00 F0 C7 AE 66 09
Dec 19 18:06:35 display-guest-logs.sh[2036]: FA B0 40 02 2C 00 DD 6F AC C8 6C E1 AF 4D 54 F6
Dec 19 18:06:35 display-guest-logs.sh[2036]: 3D 5C 8A E2 EB 15 54 88 7C 16 BA 74 F2 4F C5 E7
Dec 19 18:06:35 display-guest-logs.sh[2036]: Host Data:
Dec 19 18:06:35 display-guest-logs.sh[2036]: 82 EA 7D 0E ED 13 9A 19 A5 62 50 F9 10 B2 FB E2
Dec 19 18:06:35 display-guest-logs.sh[2036]: 51 6A 51 CC ED 64 41 CC EC D6 18 CB 83 2B 65 D5
Dec 19 18:06:35 display-guest-logs.sh[2036]: ID Key Digest:
Dec 19 18:06:35 display-guest-logs.sh[2036]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 19 18:06:35 display-guest-logs.sh[2036]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 19 18:06:35 display-guest-logs.sh[2036]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 19 18:06:35 display-guest-logs.sh[2036]: Author Key Digest:
Dec 19 18:06:35 display-guest-logs.sh[2036]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 19 18:06:35 display-guest-logs.sh[2036]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 19 18:06:35 display-guest-logs.sh[2036]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 19 18:06:35 display-guest-logs.sh[2036]: Report ID:
Dec 19 18:06:35 display-guest-logs.sh[2036]: 6E 8A 4E 79 55 2B E0 8D 7F 33 60 DF C0 EE EA 4A
Dec 19 18:06:35 systemd[1]: Finished display-guest-logs.service - Show the guest logs for the appropriate services in the host.
Dec 19 18:06:35 display-guest-logs.sh[2036]: 30 16 3C FC 2D 8C 40 A1 84 38 7A 9E A3 70 48 A7
Dec 19 18:06:35 display-guest-logs.sh[2036]: Report ID Migration Agent:
Dec 19 18:06:35 display-guest-logs.sh[2036]: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Dec 19 18:06:35 display-guest-logs.sh[2036]: snpguest-attestation.service: Deactivated successfully.
Dec 19 18:06:35 display-guest-logs.sh[2036]: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Dec 19 18:06:35 display-guest-logs.sh[2036]: Reported TCB:
Dec 19 18:06:35 display-guest-logs.sh[2036]: TCB Version:
Dec 19 18:06:35 display-guest-logs.sh[2036]: Microcode: 219
Dec 19 18:06:35 display-guest-logs.sh[2036]: SNP: 25
Dec 19 18:06:35 display-guest-logs.sh[2036]: TEE: 0
Dec 19 18:06:35 display-guest-logs.sh[2036]: Boot Loader: 4
Dec 19 18:06:35 display-guest-logs.sh[2036]: FMC: None
Dec 19 18:06:35 display-guest-logs.sh[2036]: CPUID Family ID: 25
Dec 19 18:06:35 display-guest-logs.sh[2036]: CPUID Model ID: 1
Dec 19 18:06:35 display-guest-logs.sh[2036]: CPUID Stepping: 1
Dec 19 18:06:35 display-guest-logs.sh[2036]: Chip ID:
Dec 19 18:06:35 display-guest-logs.sh[2036]: 2A 9F AF 18 72 54 4D E3 23 82 6F B8 37 A9 30 0B
Dec 19 18:06:35 display-guest-logs.sh[2036]: 79 F0 B5 9C FB CC 94 83 E7 85 AB FE E8 FF DA 91
Dec 19 18:06:35 display-guest-logs.sh[2036]: C1 21 07 80 60 87 1B CC D5 62 EC CF 0A 23 DF F7
Dec 19 18:06:35 display-guest-logs.sh[2036]: 0A 42 4B 5C 71 A2 B3 0C 34 F8 DF 03 CB 48 0F 59
Dec 19 18:06:35 display-guest-logs.sh[2036]: Committed TCB:
Dec 19 18:06:35 display-guest-logs.sh[2036]: TCB Version:
Dec 19 18:06:35 display-guest-logs.sh[2036]: Microcode: 219
Dec 19 18:06:35 display-guest-logs.sh[2036]: SNP: 25
Dec 19 18:06:35 display-guest-logs.sh[2036]: TEE: 0
Dec 19 18:06:35 display-guest-logs.sh[2036]: Boot Loader: 4
Dec 19 18:06:35 display-guest-logs.sh[2036]: FMC: None
Dec 19 18:06:35 display-guest-logs.sh[2036]: Current Version: 1.55.31
Dec 19 18:06:35 display-guest-logs.sh[2036]: Committed Version: 1.55.31
Dec 19 18:06:35 display-guest-logs.sh[2036]: Launch TCB:
Dec 19 18:06:35 display-guest-logs.sh[2036]: TCB Version:
Dec 19 18:06:35 display-guest-logs.sh[2036]: Microcode: 219
Dec 19 18:06:35 display-guest-logs.sh[2036]: SNP: 25
Dec 19 18:06:35 display-guest-logs.sh[2036]: TEE: 0
Dec 19 18:06:35 display-guest-logs.sh[2036]: Boot Loader: 4
Dec 19 18:06:35 display-guest-logs.sh[2036]: FMC: None
Dec 19 18:06:35 display-guest-logs.sh[2036]: Launch Mitigation Vector: None
Dec 19 18:06:35 display-guest-logs.sh[2036]: Current Mitigation Vector: None
Dec 19 18:06:35 display-guest-logs.sh[2036]: Signature:
Dec 19 18:06:35 display-guest-logs.sh[2036]: R:
Dec 19 18:06:35 display-guest-logs.sh[2036]: 55 83 E3 59 E2 2E B0 E3 84 12 C0 DB 16 E8 73 79
Dec 19 18:06:35 display-guest-logs.sh[2036]: B7 B8 A6 AD 96 0B 27 58 AD 09 14 B5 C0 06 56 35
Dec 19 18:06:35 display-guest-logs.sh[2036]: 2D C0 9F 40 57 F2 4C E0 D2 62 7E 79 D3 4D BB D6
Dec 19 18:06:35 display-guest-logs.sh[2036]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 19 18:06:35 display-guest-logs.sh[2036]: 00 00 00 00 00 00 00 00
Dec 19 18:06:35 display-guest-logs.sh[2036]: S:
Dec 19 18:06:35 display-guest-logs.sh[2036]: FB D5 96 F9 12 3D 7E 83 61 F8 5B D8 4A E1 88 C4
Dec 19 18:06:35 display-guest-logs.sh[2036]: 13 55 98 11 36 38 36 5C 9C 21 D1 84 68 93 E1 13
Dec 19 18:06:35 display-guest-logs.sh[2036]: 72 73 20 1B 20 D8 F9 94 C8 4B 4F CE 65 28 CC D9
Dec 19 18:06:35 display-guest-logs.sh[2036]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 19 18:06:35 display-guest-logs.sh[2036]: 00 00 00 00 00 00 00 00
Dec 19 18:06:35 display-guest-logs.sh[2036]: SNP Attestation Report generated successfully !!
Dec 19 18:06:35 display-guest-logs.sh[2036]: Attestation Report:
Dec 19 18:06:35 display-guest-logs.sh[2036]: Version: 4
Dec 19 18:06:35 display-guest-logs.sh[2036]: Guest SVN: 0
Dec 19 18:06:35 display-guest-logs.sh[2036]: Guest Policy (0x30000):
Dec 19 18:06:35 display-guest-logs.sh[2036]: ABI Major: 0
Dec 19 18:06:35 display-guest-logs.sh[2036]: ABI Minor: 0
Dec 19 18:06:35 display-guest-logs.sh[2036]: SMT Allowed: true
Dec 19 18:06:35 display-guest-logs.sh[2036]: Migrate MA: false
Dec 19 18:06:35 display-guest-logs.sh[2036]: Debug Allowed: false
Dec 19 18:06:35 display-guest-logs.sh[2036]: Single Socket: false
Dec 19 18:06:35 display-guest-logs.sh[2036]: CXL Allowed: false
Dec 19 18:06:35 display-guest-logs.sh[2036]: AEX 256 XTS: false
Dec 19 18:06:35 display-guest-logs.sh[2036]: RAPL Allowed: false
Dec 19 18:06:35 display-guest-logs.sh[2036]: Ciphertext hiding: false
Dec 19 18:06:35 display-guest-logs.sh[2036]: Page Swap Disable: false
Dec 19 18:06:35 display-guest-logs.sh[2036]: Family ID:
Dec 19 18:06:35 display-guest-logs.sh[2036]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 19 18:06:35 display-guest-logs.sh[2036]: Image ID:
Dec 19 18:06:35 display-guest-logs.sh[2036]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 19 18:06:35 display-guest-logs.sh[2036]: VMPL: 1
Dec 19 18:06:35 display-guest-logs.sh[2036]: Signature Algorithm: 1
Dec 19 18:06:35 display-guest-logs.sh[2036]: Current TCB:
Dec 19 18:06:35 display-guest-logs.sh[2036]: TCB Version:
Dec 19 18:06:35 display-guest-logs.sh[2036]: Microcode: 219
Dec 19 18:06:35 display-guest-logs.sh[2036]: SNP: 25
Dec 19 18:06:35 display-guest-logs.sh[2036]: TEE: 0
Dec 19 18:06:35 display-guest-logs.sh[2036]: Boot Loader: 4
Dec 19 18:06:35 display-guest-logs.sh[2036]: FMC: None
Dec 19 18:06:35 display-guest-logs.sh[2036]: Platform Info (39):
Dec 19 18:06:35 display-guest-logs.sh[2036]: Finished snpguest-attestation.service - Run SNP Regular Attestation after boot.
Dec 19 18:06:35 display-guest-logs.sh[2036]: SMT Enabled: true
Dec 19 18:06:35 display-guest-logs.sh[2036]: TSME Enabled: true
Dec 19 18:06:35 display-guest-logs.sh[2036]: ECC Enabled: true
Dec 19 18:06:35 display-guest-logs.sh[2036]: RAPL Disabled: false
Dec 19 18:06:35 display-guest-logs.sh[2036]: Ciphertext Hiding Enabled: false
Dec 19 18:06:35 display-guest-logs.sh[2036]: Alias Check Complete: true
Dec 19 18:06:35 display-guest-logs.sh[2036]: SEV-TIO Enabled: false
Dec 19 18:06:35 display-guest-logs.sh[2036]: Key Information:
Dec 19 18:06:35 display-guest-logs.sh[2036]: author key enabled: false
Dec 19 18:06:35 display-guest-logs.sh[2036]: mask chip key: false
Dec 19 18:06:35 display-guest-logs.sh[2036]: signing key: vcek
Dec 19 18:06:35 display-guest-logs.sh[2036]: Report Data:
Dec 19 18:06:35 display-guest-logs.sh[2036]: 37 8B A7 DD D2 83 E2 08 B7 DD 49 26 B1 1B 93 10
Dec 19 18:06:35 display-guest-logs.sh[2036]: 3A 60 02 50 87 CF 89 A7 FE AF 52 D9 36 4D 9C BD
Dec 19 18:06:35 display-guest-logs.sh[2036]: 04 A1 7E 63 C9 3D D8 9A 5C 70 BA 7F CD 19 8E CE
Dec 19 18:06:35 display-guest-logs.sh[2036]: 7A 5C 93 17 74 5E 29 5B 0C 41 AF BF A3 5B 82 81
Dec 19 18:06:35 display-guest-logs.sh[2036]: Measurement:
Dec 19 18:06:35 display-guest-logs.sh[2036]: D7 82 1A 32 E5 71 C0 30 A2 2B 00 F0 C7 AE 66 09
Dec 19 18:06:35 display-guest-logs.sh[2036]: FA B0 40 02 2C 00 DD 6F AC C8 6C E1 AF 4D 54 F6
Dec 19 18:06:35 display-guest-logs.sh[2036]: 3D 5C 8A E2 EB 15 54 88 7C 16 BA 74 F2 4F C5 E7
Dec 19 18:06:35 display-guest-logs.sh[2036]: Host Data:
Dec 19 18:06:35 display-guest-logs.sh[2036]: 82 EA 7D 0E ED 13 9A 19 A5 62 50 F9 10 B2 FB E2
Dec 19 18:06:35 display-guest-logs.sh[2036]: 51 6A 51 CC ED 64 41 CC EC D6 18 CB 83 2B 65 D5
Dec 19 18:06:35 display-guest-logs.sh[2036]: ID Key Digest:
Dec 19 18:06:35 display-guest-logs.sh[2036]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 19 18:06:35 display-guest-logs.sh[2036]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 19 18:06:35 display-guest-logs.sh[2036]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 19 18:06:35 display-guest-logs.sh[2036]: Author Key Digest:
Dec 19 18:06:35 display-guest-logs.sh[2036]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 19 18:06:35 display-guest-logs.sh[2036]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 19 18:06:35 display-guest-logs.sh[2036]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 19 18:06:35 display-guest-logs.sh[2036]: Report ID:
Dec 19 18:06:35 display-guest-logs.sh[2036]: 6E 8A 4E 79 55 2B E0 8D 7F 33 60 DF C0 EE EA 4A
Dec 19 18:06:35 display-guest-logs.sh[2036]: 30 16 3C FC 2D 8C 40 A1 84 38 7A 9E A3 70 48 A7
Dec 19 18:06:35 display-guest-logs.sh[2036]: Report ID Migration Agent:
Dec 19 18:06:35 display-guest-logs.sh[2036]: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Dec 19 18:06:35 display-guest-logs.sh[2036]: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Dec 19 18:06:35 display-guest-logs.sh[2036]: Reported TCB:
Dec 19 18:06:35 display-guest-logs.sh[2036]: TCB Version:
Dec 19 18:06:35 display-guest-logs.sh[2036]: Microcode: 219
Dec 19 18:06:35 display-guest-logs.sh[2036]: SNP: 25
Dec 19 18:06:35 display-guest-logs.sh[2036]: TEE: 0
Dec 19 18:06:35 display-guest-logs.sh[2036]: Boot Loader: 4
Dec 19 18:06:35 display-guest-logs.sh[2036]: FMC: None
Dec 19 18:06:35 display-guest-logs.sh[2036]: CPUID Family ID: 25
Dec 19 18:06:35 display-guest-logs.sh[2036]: CPUID Model ID: 1
Dec 19 18:06:35 display-guest-logs.sh[2036]: CPUID Stepping: 1
Dec 19 18:06:35 display-guest-logs.sh[2036]: Chip ID:
Dec 19 18:06:35 display-guest-logs.sh[2036]: 2A 9F AF 18 72 54 4D E3 23 82 6F B8 37 A9 30 0B
Dec 19 18:06:35 display-guest-logs.sh[2036]: 79 F0 B5 9C FB CC 94 83 E7 85 AB FE E8 FF DA 91
Dec 19 18:06:35 display-guest-logs.sh[2036]: C1 21 07 80 60 87 1B CC D5 62 EC CF 0A 23 DF F7
Dec 19 18:06:35 display-guest-logs.sh[2036]: 0A 42 4B 5C 71 A2 B3 0C 34 F8 DF 03 CB 48 0F 59
Dec 19 18:06:35 display-guest-logs.sh[2036]: Committed TCB:
Dec 19 18:06:35 display-guest-logs.sh[2036]: TCB Version:
Dec 19 18:06:35 display-guest-logs.sh[2036]: Microcode: 219
Dec 19 18:06:35 display-guest-logs.sh[2036]: SNP: 25
Dec 19 18:06:35 display-guest-logs.sh[2036]: TEE: 0
Dec 19 18:06:35 display-guest-logs.sh[2036]: Boot Loader: 4
Dec 19 18:06:35 display-guest-logs.sh[2036]: FMC: None
Dec 19 18:06:35 display-guest-logs.sh[2036]: Current Version: 1.55.31
Dec 19 18:06:35 display-guest-logs.sh[2036]: Committed Version: 1.55.31
Dec 19 18:06:35 display-guest-logs.sh[2036]: Launch TCB:
Dec 19 18:06:35 display-guest-logs.sh[2036]: TCB Version:
Dec 19 18:06:35 display-guest-logs.sh[2036]: Microcode: 219
Dec 19 18:06:35 display-guest-logs.sh[2036]: SNP: 25
Dec 19 18:06:35 display-guest-logs.sh[2036]: TEE: 0
Dec 19 18:06:35 display-guest-logs.sh[2036]: Boot Loader: 4
Dec 19 18:06:35 display-guest-logs.sh[2036]: FMC: None
Dec 19 18:06:35 display-guest-logs.sh[2036]: Launch Mitigation Vector: None
Dec 19 18:06:35 display-guest-logs.sh[2036]: Current Mitigation Vector: None
Dec 19 18:06:35 display-guest-logs.sh[2036]: Signature:
Dec 19 18:06:35 display-guest-logs.sh[2036]: R:
Dec 19 18:06:35 display-guest-logs.sh[2036]: 55 83 E3 59 E2 2E B0 E3 84 12 C0 DB 16 E8 73 79
Dec 19 18:06:35 display-guest-logs.sh[2036]: B7 B8 A6 AD 96 0B 27 58 AD 09 14 B5 C0 06 56 35
Dec 19 18:06:35 display-guest-logs.sh[2036]: 2D C0 9F 40 57 F2 4C E0 D2 62 7E 79 D3 4D BB D6
Dec 19 18:06:35 display-guest-logs.sh[2036]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 19 18:06:35 display-guest-logs.sh[2036]: 00 00 00 00 00 00 00 00
Dec 19 18:06:35 display-guest-logs.sh[2036]: S:
Dec 19 18:06:35 display-guest-logs.sh[2036]: FB D5 96 F9 12 3D 7E 83 61 F8 5B D8 4A E1 88 C4
Dec 19 18:06:35 display-guest-logs.sh[2036]: 13 55 98 11 36 38 36 5C 9C 21 D1 84 68 93 E1 13
Dec 19 18:06:35 display-guest-logs.sh[2036]: 72 73 20 1B 20 D8 F9 94 C8 4B 4F CE 65 28 CC D9
Dec 19 18:06:35 display-guest-logs.sh[2036]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 19 18:06:35 display-guest-logs.sh[2036]: 00 00 00 00 00 00 00 00
Dec 19 18:06:35 display-guest-logs.sh[2036]: Validate Request Data Attribute ...
Dec 19 18:06:35 display-guest-logs.sh[2036]: Random Request Data:
Dec 19 18:06:35 display-guest-logs.sh[2036]: 378ba7ddd283e208b7dd4926b11b93103a60025087cf89a7feaf52d9364d9cbd04a17e63c93dd89a5c70ba7fcd198ece7a5c9317745e295b0c41afbfa35b8281
Dec 19 18:06:35 display-guest-logs.sh[2036]: Request Data from SNP Attestation Report:
Dec 19 18:06:35 display-guest-logs.sh[2036]: 378ba7ddd283e208b7dd4926b11b93103a60025087cf89a7feaf52d9364d9cbd04a17e63c93dd89a5c70ba7fcd198ece7a5c9317745e295b0c41afbfa35b8281
Dec 19 18:06:35 display-guest-logs.sh[2036]: The random request data generated matches the snp guest report request data!
Dec 19 18:06:35 display-guest-logs.sh[2036]: Validate Measurement Attribute ...
Dec 19 18:06:35 display-guest-logs.sh[2036]: Expected Measurement:
Dec 19 18:06:35 display-guest-logs.sh[2036]: 82ea7d0eed139a19a56250f910b2fbe2516a51cced6441ccecd618cb832b65d5
Dec 19 18:06:35 display-guest-logs.sh[2036]: Measurement from SNP Attestation Report:
Dec 19 18:06:35 display-guest-logs.sh[2036]: 82ea7d0eed139a19a56250f910b2fbe2516a51cced6441ccecd618cb832b65d5
Dec 19 18:06:35 display-guest-logs.sh[2036]: The expected measurement matches the snp guest report measurement!