-
Notifications
You must be signed in to change notification settings - Fork 6
Description
====== SEV CERTIFICATE ======
SEV VERSION: 3.0-0
=== TEST ENVIRONMENT DETAILS ===
Host Environment Details:
Host Operating System: Ubuntu 25.04
OVMF Version: 2025.02-3ubuntu2.2
QEMU Version: 1:9.2.1+ds-1ubuntu5.2
Host Kernel Version: 6.14.0-29-generic
Guest Environment Details:
Guest Operating System: Ubuntu 25.04
Guest Kernel version: 6.14.0-29-generic
=== SUMMARY ===
[ ✅ ] SEV VERSION 3.0-0 SNP HOST TESTS
✅ snphost-ok.service : Run snphost ok to make sure host is correctly set-up for SNP functionalities....
✅ calculate-measurement.service : Calculate guest measurement...
✅ verify-guest.service : Verify the SEV-SNP guest booted correctly...
✅ display-guest-logs.service : Show the guest logs for the appropriate services in the host...
[ ✅ ] SEV VERSION 3.0-0 SNP GUEST TESTS
✅ snpguest-ok.service : Run snguest ok to verify SNP enablement on guest...
✅ snpguest-attestation.service : Run SNP Regular Attestation after boot...
✅ Generation of SNP Guest Report
✅ Fetch of CA certificate chain
✅ Fetch of VCEK certificate chain
✅ Verification of ARK, ASK and VCEK cert-chain
✅ Verification of SNP Attestation Report
✅ Display of SNP Attestation Report
=== SEV VERSION 3.0-0 LOG ===
Dec 19 18:22:20 systemd[1]: Starting calculate-measurement.service - Calculate guest measurement...
Dec 19 18:22:20 systemd[1]: Starting snphost-ok.service - Run snphost ok to make sure host is correctly set-up for SNP functionalities....
Dec 19 18:22:20 snphost[1733]: [ PASS ] - AMD CPU
Dec 19 18:22:20 snphost[1733]: [ PASS ] - Microcode support
Dec 19 18:22:20 snphost[1733]: [ PASS ] - Secure Memory Encryption (SME)
Dec 19 18:22:20 snphost[1733]: [ PASS ] - SME: Enabled in MSR
Dec 19 18:22:20 snphost[1733]: [ PASS ] - Secure Encrypted Virtualization (SEV)
Dec 19 18:22:20 snphost[1733]: [ PASS ] - SEV firmware version: 1.55
Dec 19 18:22:20 snphost[1733]: [ PASS ] - Encrypted State (SEV-ES)
Dec 19 18:22:20 snphost[1733]: [ PASS ] - SEV-ES initialized
Dec 19 18:22:20 snphost[1733]: [ PASS ] - SEV initialized: Initialized, no guests running
Dec 19 18:22:20 snphost[1733]: [ PASS ] - Secure Nested Paging (SEV-SNP)
Dec 19 18:22:20 snphost[1733]: [ PASS ] - VM Permission Levels
Dec 19 18:22:20 snphost[1733]: [ PASS ] - Number of VMPLs: 4
Dec 19 18:22:20 snphost[1733]: [ PASS ] - SNP: Enabled in MSR
Dec 19 18:22:20 snphost[1733]: [ PASS ] - SNP initialized
Dec 19 18:22:20 snphost[1733]: [ PASS ] - RMP table addresses: 0x7ffe500000 - 0x807edfffff
Dec 19 18:22:20 snphost[1733]: [ PASS ] - RMP table initialized
Dec 19 18:22:20 snphost[1733]: [ PASS ] - Alias check: Completed since last system update, no aliasing addresses
Dec 19 18:22:20 snphost[1733]: [ PASS ] - Physical address bit reduction: 5
Dec 19 18:22:20 snphost[1733]: [ PASS ] - C-bit location: 51
Dec 19 18:22:20 snphost[1733]: [ PASS ] - Number of encrypted guests supported simultaneously: 509
Dec 19 18:22:20 snphost[1733]: [ PASS ] - Minimum ASID value for SEV-enabled, SEV-ES disabled guest: 100
Dec 19 18:22:20 snphost[1733]: [ PASS ] - /dev/sev readable
Dec 19 18:22:20 snphost[1733]: [ PASS ] - /dev/sev writable
Dec 19 18:22:20 snphost[1733]: [ PASS ] - Page flush MSR: ENABLED
Dec 19 18:22:20 snphost[1733]: [ PASS ] - KVM supported: API version: 12
Dec 19 18:22:20 snphost[1733]: [ PASS ] - SEV enabled in KVM
Dec 19 18:22:20 snphost[1733]: [ PASS ] - SEV-ES enabled in KVM
Dec 19 18:22:20 snphost[1733]: [ PASS ] - SEV-SNP enabled in KVM
Dec 19 18:22:20 snphost[1733]: [ PASS ] - Memlock resource limit: Soft: 8388608 | Hard: 8388608
Dec 19 18:22:20 snphost[1733]: [ PASS ] - Comparing TCB values: TCB versions match
Dec 19 18:22:20 snphost[1733]: Platform TCB version: TCB Version:
Dec 19 18:22:20 snphost[1733]: Microcode: 219
Dec 19 18:22:20 snphost[1733]: SNP: 25
Dec 19 18:22:20 snphost[1733]: TEE: 0
Dec 19 18:22:20 snphost[1733]: Boot Loader: 4
Dec 19 18:22:20 snphost[1733]: FMC: None
Dec 19 18:22:20 snphost[1733]: Reported TCB version: TCB Version:
Dec 19 18:22:20 snphost[1733]: Microcode: 219
Dec 19 18:22:20 snphost[1733]: SNP: 25
Dec 19 18:22:20 snphost[1733]: TEE: 0
Dec 19 18:22:20 snphost[1733]: Boot Loader: 4
Dec 19 18:22:20 snphost[1733]: FMC: None
Dec 19 18:22:20 systemd[1]: snphost-ok.service: Deactivated successfully.
Dec 19 18:22:20 systemd[1]: Finished snphost-ok.service - Run snphost ok to make sure host is correctly set-up for SNP functionalities..
Dec 19 18:22:20 guest_measurement.sh[1610]: 0x264bf6258c9ac274b03998a2b6b09ec7ef552b0ba7136640f1f56cf0f8fbd68dc921b66baa2adde3cd0bcbbf4599e43a
Dec 19 18:22:20 systemd[1]: calculate-measurement.service: Deactivated successfully.
Dec 19 18:22:20 systemd[1]: Finished calculate-measurement.service - Calculate guest measurement.
Dec 19 18:22:20 systemd[1]: calculate-measurement.service: Consumed 332ms CPU time, 233.2M memory peak.
Dec 19 18:22:20 systemd[1]: Starting verify-guest.service - Verify the SEV-SNP guest booted correctly...
Dec 19 18:22:34 verify-guest.sh[1746]: Guest boot successful.
Dec 19 18:22:34 systemd[1]: verify-guest.service: Deactivated successfully.
Dec 19 18:22:34 systemd[1]: Finished verify-guest.service - Verify the SEV-SNP guest booted correctly.
Dec 19 18:22:34 systemd[1]: Starting display-guest-logs.service - Show the guest logs for the appropriate services in the host...
Dec 19 18:22:35 display-guest-logs.sh[1806]: SEV-SNP guest test results:
Dec 19 18:22:35 display-guest-logs.sh[1806]: For more information check journals in /var/log/journal/guest-logs
Dec 19 18:22:35 display-guest-logs.sh[1806]: Starting snpguest-ok.service - Run snguest ok to verify SNP enablement on guest...
Dec 19 18:22:35 display-guest-logs.sh[1806]: [ PASS ] - SEV: ENABLED
Dec 19 18:22:35 display-guest-logs.sh[1806]: [ PASS ] - SEV-ES: ENABLED
Dec 19 18:22:35 display-guest-logs.sh[1806]: [ PASS ] - SNP: ENABLED
Dec 19 18:22:35 display-guest-logs.sh[1806]: [ PASS ] - Optional Features statuses:
Dec 19 18:22:35 display-guest-logs.sh[1806]: [ PASS ] - VTOM: DISABLED
Dec 19 18:22:35 display-guest-logs.sh[1806]: [ PASS ] - ReflectVC: DISABLED
Dec 19 18:22:35 display-guest-logs.sh[1806]: [ PASS ] - Restricted Injection: DISABLED
Dec 19 18:22:35 display-guest-logs.sh[1806]: [ PASS ] - Alternate Injection: DISABLED
Dec 19 18:22:35 display-guest-logs.sh[1806]: [ PASS ] - Debug Swap: DISABLED
Dec 19 18:22:35 display-guest-logs.sh[1806]: [ PASS ] - Prevent Host IBS: DISABLED
Dec 19 18:22:35 display-guest-logs.sh[1806]: [ PASS ] - SNP BTB Isolation: DISABLED
Dec 19 18:22:35 display-guest-logs.sh[1806]: [ PASS ] - VMPL SSS: DISABLED
Dec 19 18:22:35 display-guest-logs.sh[1806]: [ PASS ] - Secure TSE: DISABLED
Dec 19 18:22:35 display-guest-logs.sh[1806]: [ PASS ] - VMG Exit Parameter: DISABLED
Dec 19 18:22:35 display-guest-logs.sh[1806]: [ PASS ] - IBS Virtualization: DISABLED
Dec 19 18:22:35 display-guest-logs.sh[1806]: [ PASS ] - VMSA Reg Prot: DISABLED
Dec 19 18:22:35 display-guest-logs.sh[1806]: [ PASS ] - SMT Protection: DISABLED
Dec 19 18:22:35 display-guest-logs.sh[1806]: snpguest-ok.service: Deactivated successfully.
Dec 19 18:22:35 display-guest-logs.sh[1806]: Finished snpguest-ok.service - Run snguest ok to verify SNP enablement on guest.
Dec 19 18:22:35 display-guest-logs.sh[1806]: Perform Regular Attestation workflow using snpguest tool ...
Dec 19 18:22:35 display-guest-logs.sh[1806]: Starting snpguest-attestation.service - Run SNP Regular Attestation after boot...
Dec 19 18:22:35 display-guest-logs.sh[1806]: The AMD ARK was self-signed!
Dec 19 18:22:35 display-guest-logs.sh[1806]: The AMD ASK was signed by the AMD ARK!
Dec 19 18:22:35 display-guest-logs.sh[1806]: The VCEK was signed by the AMD ASK!
Dec 19 18:22:35 display-guest-logs.sh[1806]: Reported TCB Boot Loader from certificate matches the attestation report.
Dec 19 18:22:35 display-guest-logs.sh[1806]: Reported TCB TEE from certificate matches the attestation report.
Dec 19 18:22:35 display-guest-logs.sh[1806]: Reported TCB SNP from certificate matches the attestation report.
Dec 19 18:22:35 display-guest-logs.sh[1806]: Reported TCB Microcode from certificate matches the attestation report.
Dec 19 18:22:35 display-guest-logs.sh[1806]: VEK signed the Attestation Report!
Dec 19 18:22:35 display-guest-logs.sh[1806]: Attestation Report:
Dec 19 18:22:35 display-guest-logs.sh[1806]: Version: 4
Dec 19 18:22:35 display-guest-logs.sh[1806]: Guest SVN: 0
Dec 19 18:22:35 display-guest-logs.sh[1806]: Guest Policy (0x30000):
Dec 19 18:22:35 display-guest-logs.sh[1806]: ABI Major: 0
Dec 19 18:22:35 display-guest-logs.sh[1806]: ABI Minor: 0
Dec 19 18:22:35 display-guest-logs.sh[1806]: SMT Allowed: true
Dec 19 18:22:35 display-guest-logs.sh[1806]: Migrate MA: false
Dec 19 18:22:35 display-guest-logs.sh[1806]: Debug Allowed: false
Dec 19 18:22:35 display-guest-logs.sh[1806]: Single Socket: false
Dec 19 18:22:35 display-guest-logs.sh[1806]: CXL Allowed: false
Dec 19 18:22:35 display-guest-logs.sh[1806]: AEX 256 XTS: false
Dec 19 18:22:35 display-guest-logs.sh[1806]: RAPL Allowed: false
Dec 19 18:22:36 display-guest-logs.sh[1806]: Ciphertext hiding: false
Dec 19 18:22:36 display-guest-logs.sh[1806]: Page Swap Disable: false
Dec 19 18:22:36 display-guest-logs.sh[1806]: Family ID:
Dec 19 18:22:36 display-guest-logs.sh[1806]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 19 18:22:36 display-guest-logs.sh[1806]: Image ID:
Dec 19 18:22:36 display-guest-logs.sh[1806]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 19 18:22:36 display-guest-logs.sh[1806]: VMPL: 1
Dec 19 18:22:36 display-guest-logs.sh[1806]: Signature Algorithm: 1
Dec 19 18:22:36 display-guest-logs.sh[1806]: Current TCB:
Dec 19 18:22:36 display-guest-logs.sh[1806]: TCB Version:
Dec 19 18:22:36 display-guest-logs.sh[1806]: Microcode: 219
Dec 19 18:22:36 display-guest-logs.sh[1806]: SNP: 25
Dec 19 18:22:36 display-guest-logs.sh[1806]: TEE: 0
Dec 19 18:22:36 display-guest-logs.sh[1806]: Boot Loader: 4
Dec 19 18:22:36 display-guest-logs.sh[1806]: FMC: None
Dec 19 18:22:36 display-guest-logs.sh[1806]: Platform Info (39):
Dec 19 18:22:36 display-guest-logs.sh[1806]: SMT Enabled: true
Dec 19 18:22:36 display-guest-logs.sh[1806]: TSME Enabled: true
Dec 19 18:22:36 display-guest-logs.sh[1806]: ECC Enabled: true
Dec 19 18:22:36 display-guest-logs.sh[1806]: RAPL Disabled: false
Dec 19 18:22:36 display-guest-logs.sh[1806]: Ciphertext Hiding Enabled: false
Dec 19 18:22:36 display-guest-logs.sh[1806]: Alias Check Complete: true
Dec 19 18:22:36 display-guest-logs.sh[1806]: SEV-TIO Enabled: false
Dec 19 18:22:36 display-guest-logs.sh[1806]: Key Information:
Dec 19 18:22:36 display-guest-logs.sh[1806]: author key enabled: false
Dec 19 18:22:36 display-guest-logs.sh[1806]: mask chip key: false
Dec 19 18:22:36 display-guest-logs.sh[1806]: signing key: vcek
Dec 19 18:22:36 display-guest-logs.sh[1806]: Report Data:
Dec 19 18:22:36 display-guest-logs.sh[1806]: 1C 1A 27 6A D5 CE 96 23 23 BA 38 CF B5 4D 4B A2
Dec 19 18:22:36 display-guest-logs.sh[1806]: 0D 2F 76 45 07 A2 86 91 A2 51 51 EF C8 55 34 96
Dec 19 18:22:36 display-guest-logs.sh[1806]: 31 23 62 12 F4 E6 37 D6 E1 A9 7D FC 6D 37 7B 24
Dec 19 18:22:36 display-guest-logs.sh[1806]: 29 57 EB BD 9F 7E 8C 29 BA 30 58 CA 65 A7 91 A1
Dec 19 18:22:36 display-guest-logs.sh[1806]: Measurement:
Dec 19 18:22:36 display-guest-logs.sh[1806]: 26 4B F6 25 8C 9A C2 74 B0 39 98 A2 B6 B0 9E C7
Dec 19 18:22:36 display-guest-logs.sh[1806]: EF 55 2B 0B A7 13 66 40 F1 F5 6C F0 F8 FB D6 8D
Dec 19 18:22:36 display-guest-logs.sh[1806]: C9 21 B6 6B AA 2A DD E3 CD 0B CB BF 45 99 E4 3A
Dec 19 18:22:36 display-guest-logs.sh[1806]: Host Data:
Dec 19 18:22:36 display-guest-logs.sh[1806]: 6A E1 4C C3 30 41 1E 2D 5E 59 5A 68 8C 23 80 43
Dec 19 18:22:36 display-guest-logs.sh[1806]: 42 66 BE 09 04 4D 79 5B D2 B4 38 C5 78 2D E9 AD
Dec 19 18:22:36 display-guest-logs.sh[1806]: ID Key Digest:
Dec 19 18:22:36 display-guest-logs.sh[1806]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 19 18:22:36 display-guest-logs.sh[1806]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 19 18:22:36 display-guest-logs.sh[1806]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 19 18:22:36 display-guest-logs.sh[1806]: Author Key Digest:
Dec 19 18:22:36 display-guest-logs.sh[1806]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 19 18:22:36 display-guest-logs.sh[1806]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 19 18:22:36 display-guest-logs.sh[1806]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 19 18:22:36 display-guest-logs.sh[1806]: Report ID:
Dec 19 18:22:36 display-guest-logs.sh[1806]: 8B 66 53 FF BB CD E2 89 89 26 6C 3C 4C 18 6A E5
Dec 19 18:22:36 display-guest-logs.sh[1806]: 2C AA D7 6A 78 70 8D 84 0D 33 5F C9 65 1B EB DE
Dec 19 18:22:36 display-guest-logs.sh[1806]: Report ID Migration Agent:
Dec 19 18:22:36 display-guest-logs.sh[1806]: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Dec 19 18:22:36 display-guest-logs.sh[1806]: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Dec 19 18:22:36 display-guest-logs.sh[1806]: Reported TCB:
Dec 19 18:22:36 display-guest-logs.sh[1806]: TCB Version:
Dec 19 18:22:36 display-guest-logs.sh[1806]: Microcode: 219
Dec 19 18:22:36 display-guest-logs.sh[1806]: SNP: 25
Dec 19 18:22:36 display-guest-logs.sh[1806]: TEE: 0
Dec 19 18:22:36 display-guest-logs.sh[1806]: Boot Loader: 4
Dec 19 18:22:36 display-guest-logs.sh[1806]: FMC: None
Dec 19 18:22:36 display-guest-logs.sh[1806]: CPUID Family ID: 25
Dec 19 18:22:36 display-guest-logs.sh[1806]: CPUID Model ID: 1
Dec 19 18:22:36 display-guest-logs.sh[1806]: CPUID Stepping: 1
Dec 19 18:22:36 display-guest-logs.sh[1806]: Chip ID:
Dec 19 18:22:36 display-guest-logs.sh[1806]: 2A 9F AF 18 72 54 4D E3 23 82 6F B8 37 A9 30 0B
Dec 19 18:22:35 systemd[1]: display-guest-logs.service: Deactivated successfully.
Dec 19 18:22:36 display-guest-logs.sh[1806]: 79 F0 B5 9C FB CC 94 83 E7 85 AB FE E8 FF DA 91
Dec 19 18:22:36 display-guest-logs.sh[1806]: C1 21 07 80 60 87 1B CC D5 62 EC CF 0A 23 DF F7
Dec 19 18:22:36 display-guest-logs.sh[1806]: 0A 42 4B 5C 71 A2 B3 0C 34 F8 DF 03 CB 48 0F 59
Dec 19 18:22:36 display-guest-logs.sh[1806]: Committed TCB:
Dec 19 18:22:36 display-guest-logs.sh[1806]: TCB Version:
Dec 19 18:22:36 display-guest-logs.sh[1806]: Microcode: 219
Dec 19 18:22:36 display-guest-logs.sh[1806]: SNP: 25
Dec 19 18:22:36 display-guest-logs.sh[1806]: TEE: 0
Dec 19 18:22:36 display-guest-logs.sh[1806]: Boot Loader: 4
Dec 19 18:22:36 display-guest-logs.sh[1806]: FMC: None
Dec 19 18:22:36 display-guest-logs.sh[1806]: Current Version: 1.55.31
Dec 19 18:22:36 display-guest-logs.sh[1806]: Committed Version: 1.55.31
Dec 19 18:22:36 display-guest-logs.sh[1806]: Launch TCB:
Dec 19 18:22:36 display-guest-logs.sh[1806]: TCB Version:
Dec 19 18:22:36 display-guest-logs.sh[1806]: Microcode: 219
Dec 19 18:22:36 display-guest-logs.sh[1806]: SNP: 25
Dec 19 18:22:36 display-guest-logs.sh[1806]: TEE: 0
Dec 19 18:22:36 display-guest-logs.sh[1806]: Boot Loader: 4
Dec 19 18:22:36 display-guest-logs.sh[1806]: FMC: None
Dec 19 18:22:36 display-guest-logs.sh[1806]: Launch Mitigation Vector: None
Dec 19 18:22:36 display-guest-logs.sh[1806]: Current Mitigation Vector: None
Dec 19 18:22:36 display-guest-logs.sh[1806]: Signature:
Dec 19 18:22:36 display-guest-logs.sh[1806]: R:
Dec 19 18:22:36 display-guest-logs.sh[1806]: 67 D8 38 F1 45 B3 41 DF 2F D1 7D 6D D7 62 69 96
Dec 19 18:22:36 display-guest-logs.sh[1806]: 87 31 22 CF 69 5C 9B 08 3D DE 37 58 45 DB 1A E6
Dec 19 18:22:36 display-guest-logs.sh[1806]: 44 B7 4D 50 D6 CE F3 63 FC F1 53 C3 5F D2 1F E7
Dec 19 18:22:36 display-guest-logs.sh[1806]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 19 18:22:36 display-guest-logs.sh[1806]: 00 00 00 00 00 00 00 00
Dec 19 18:22:36 display-guest-logs.sh[1806]: S:
Dec 19 18:22:36 display-guest-logs.sh[1806]: DC 7B DD EF 5D 2B 73 4C 5D CF CD CE 50 99 3C 57
Dec 19 18:22:36 display-guest-logs.sh[1806]: D1 30 E7 2B DC 31 DA 08 9E 1F DE 66 C0 FE B5 65
Dec 19 18:22:36 display-guest-logs.sh[1806]: AB DE A0 29 7D 8C A1 DA 4F 6C D8 55 FF A1 69 CB
Dec 19 18:22:36 display-guest-logs.sh[1806]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 19 18:22:36 display-guest-logs.sh[1806]: 00 00 00 00 00 00 00 00
Dec 19 18:22:36 display-guest-logs.sh[1806]: SNP Attestation Report generated successfully !!
Dec 19 18:22:36 display-guest-logs.sh[1806]: Attestation Report:
Dec 19 18:22:36 display-guest-logs.sh[1806]: Version: 4
Dec 19 18:22:36 display-guest-logs.sh[1806]: Guest SVN: 0
Dec 19 18:22:36 display-guest-logs.sh[1806]: Guest Policy (0x30000):
Dec 19 18:22:36 display-guest-logs.sh[1806]: ABI Major: 0
Dec 19 18:22:36 display-guest-logs.sh[1806]: ABI Minor: 0
Dec 19 18:22:36 display-guest-logs.sh[1806]: SMT Allowed: true
Dec 19 18:22:36 display-guest-logs.sh[1806]: Migrate MA: false
Dec 19 18:22:36 display-guest-logs.sh[1806]: Debug Allowed: false
Dec 19 18:22:36 display-guest-logs.sh[1806]: Single Socket: false
Dec 19 18:22:36 display-guest-logs.sh[1806]: CXL Allowed: false
Dec 19 18:22:36 display-guest-logs.sh[1806]: AEX 256 XTS: false
Dec 19 18:22:36 display-guest-logs.sh[1806]: RAPL Allowed: false
Dec 19 18:22:36 display-guest-logs.sh[1806]: Ciphertext hiding: false
Dec 19 18:22:36 display-guest-logs.sh[1806]: Page Swap Disable: false
Dec 19 18:22:36 display-guest-logs.sh[1806]: Family ID:
Dec 19 18:22:36 display-guest-logs.sh[1806]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 19 18:22:36 display-guest-logs.sh[1806]: Image ID:
Dec 19 18:22:36 display-guest-logs.sh[1806]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 19 18:22:36 display-guest-logs.sh[1806]: VMPL: 1
Dec 19 18:22:36 display-guest-logs.sh[1806]: Signature Algorithm: 1
Dec 19 18:22:36 display-guest-logs.sh[1806]: Current TCB:
Dec 19 18:22:36 display-guest-logs.sh[1806]: TCB Version:
Dec 19 18:22:36 display-guest-logs.sh[1806]: Microcode: 219
Dec 19 18:22:36 display-guest-logs.sh[1806]: SNP: 25
Dec 19 18:22:36 display-guest-logs.sh[1806]: TEE: 0
Dec 19 18:22:36 display-guest-logs.sh[1806]: Boot Loader: 4
Dec 19 18:22:36 display-guest-logs.sh[1806]: FMC: None
Dec 19 18:22:36 display-guest-logs.sh[1806]: Platform Info (39):
Dec 19 18:22:36 display-guest-logs.sh[1806]: snpguest-attestation.service: Deactivated successfully.
Dec 19 18:22:36 display-guest-logs.sh[1806]: SMT Enabled: true
Dec 19 18:22:36 display-guest-logs.sh[1806]: TSME Enabled: true
Dec 19 18:22:36 display-guest-logs.sh[1806]: ECC Enabled: true
Dec 19 18:22:36 display-guest-logs.sh[1806]: RAPL Disabled: false
Dec 19 18:22:36 display-guest-logs.sh[1806]: Ciphertext Hiding Enabled: false
Dec 19 18:22:36 display-guest-logs.sh[1806]: Alias Check Complete: true
Dec 19 18:22:36 display-guest-logs.sh[1806]: SEV-TIO Enabled: false
Dec 19 18:22:36 display-guest-logs.sh[1806]: Key Information:
Dec 19 18:22:36 display-guest-logs.sh[1806]: author key enabled: false
Dec 19 18:22:35 systemd[1]: Finished display-guest-logs.service - Show the guest logs for the appropriate services in the host.
Dec 19 18:22:36 display-guest-logs.sh[1806]: mask chip key: false
Dec 19 18:22:36 display-guest-logs.sh[1806]: signing key: vcek
Dec 19 18:22:36 display-guest-logs.sh[1806]: Report Data:
Dec 19 18:22:36 display-guest-logs.sh[1806]: 1C 1A 27 6A D5 CE 96 23 23 BA 38 CF B5 4D 4B A2
Dec 19 18:22:36 display-guest-logs.sh[1806]: 0D 2F 76 45 07 A2 86 91 A2 51 51 EF C8 55 34 96
Dec 19 18:22:36 display-guest-logs.sh[1806]: 31 23 62 12 F4 E6 37 D6 E1 A9 7D FC 6D 37 7B 24
Dec 19 18:22:36 display-guest-logs.sh[1806]: 29 57 EB BD 9F 7E 8C 29 BA 30 58 CA 65 A7 91 A1
Dec 19 18:22:36 display-guest-logs.sh[1806]: Measurement:
Dec 19 18:22:36 display-guest-logs.sh[1806]: 26 4B F6 25 8C 9A C2 74 B0 39 98 A2 B6 B0 9E C7
Dec 19 18:22:36 display-guest-logs.sh[1806]: EF 55 2B 0B A7 13 66 40 F1 F5 6C F0 F8 FB D6 8D
Dec 19 18:22:36 display-guest-logs.sh[1806]: C9 21 B6 6B AA 2A DD E3 CD 0B CB BF 45 99 E4 3A
Dec 19 18:22:36 display-guest-logs.sh[1806]: Host Data:
Dec 19 18:22:36 display-guest-logs.sh[1806]: 6A E1 4C C3 30 41 1E 2D 5E 59 5A 68 8C 23 80 43
Dec 19 18:22:36 display-guest-logs.sh[1806]: 42 66 BE 09 04 4D 79 5B D2 B4 38 C5 78 2D E9 AD
Dec 19 18:22:36 display-guest-logs.sh[1806]: ID Key Digest:
Dec 19 18:22:36 display-guest-logs.sh[1806]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 19 18:22:36 display-guest-logs.sh[1806]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 19 18:22:36 display-guest-logs.sh[1806]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 19 18:22:36 display-guest-logs.sh[1806]: Author Key Digest:
Dec 19 18:22:36 display-guest-logs.sh[1806]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 19 18:22:36 display-guest-logs.sh[1806]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 19 18:22:36 display-guest-logs.sh[1806]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 19 18:22:36 display-guest-logs.sh[1806]: Report ID:
Dec 19 18:22:36 display-guest-logs.sh[1806]: 8B 66 53 FF BB CD E2 89 89 26 6C 3C 4C 18 6A E5
Dec 19 18:22:36 display-guest-logs.sh[1806]: 2C AA D7 6A 78 70 8D 84 0D 33 5F C9 65 1B EB DE
Dec 19 18:22:36 display-guest-logs.sh[1806]: Report ID Migration Agent:
Dec 19 18:22:36 display-guest-logs.sh[1806]: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Dec 19 18:22:36 display-guest-logs.sh[1806]: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Dec 19 18:22:36 display-guest-logs.sh[1806]: Reported TCB:
Dec 19 18:22:36 display-guest-logs.sh[1806]: TCB Version:
Dec 19 18:22:36 display-guest-logs.sh[1806]: Microcode: 219
Dec 19 18:22:36 display-guest-logs.sh[1806]: SNP: 25
Dec 19 18:22:36 display-guest-logs.sh[1806]: TEE: 0
Dec 19 18:22:36 display-guest-logs.sh[1806]: Boot Loader: 4
Dec 19 18:22:36 display-guest-logs.sh[1806]: FMC: None
Dec 19 18:22:36 display-guest-logs.sh[1806]: CPUID Family ID: 25
Dec 19 18:22:36 display-guest-logs.sh[1806]: CPUID Model ID: 1
Dec 19 18:22:36 display-guest-logs.sh[1806]: CPUID Stepping: 1
Dec 19 18:22:36 display-guest-logs.sh[1806]: Chip ID:
Dec 19 18:22:36 display-guest-logs.sh[1806]: 2A 9F AF 18 72 54 4D E3 23 82 6F B8 37 A9 30 0B
Dec 19 18:22:36 display-guest-logs.sh[1806]: 79 F0 B5 9C FB CC 94 83 E7 85 AB FE E8 FF DA 91
Dec 19 18:22:36 display-guest-logs.sh[1806]: C1 21 07 80 60 87 1B CC D5 62 EC CF 0A 23 DF F7
Dec 19 18:22:36 display-guest-logs.sh[1806]: 0A 42 4B 5C 71 A2 B3 0C 34 F8 DF 03 CB 48 0F 59
Dec 19 18:22:36 display-guest-logs.sh[1806]: Committed TCB:
Dec 19 18:22:36 display-guest-logs.sh[1806]: TCB Version:
Dec 19 18:22:36 display-guest-logs.sh[1806]: Microcode: 219
Dec 19 18:22:36 display-guest-logs.sh[1806]: SNP: 25
Dec 19 18:22:36 display-guest-logs.sh[1806]: TEE: 0
Dec 19 18:22:36 display-guest-logs.sh[1806]: Boot Loader: 4
Dec 19 18:22:36 display-guest-logs.sh[1806]: FMC: None
Dec 19 18:22:36 display-guest-logs.sh[1806]: Current Version: 1.55.31
Dec 19 18:22:36 display-guest-logs.sh[1806]: Committed Version: 1.55.31
Dec 19 18:22:36 display-guest-logs.sh[1806]: Launch TCB:
Dec 19 18:22:36 display-guest-logs.sh[1806]: TCB Version:
Dec 19 18:22:36 display-guest-logs.sh[1806]: Microcode: 219
Dec 19 18:22:36 display-guest-logs.sh[1806]: Finished snpguest-attestation.service - Run SNP Regular Attestation after boot.
Dec 19 18:22:36 display-guest-logs.sh[1806]: SNP: 25
Dec 19 18:22:36 display-guest-logs.sh[1806]: TEE: 0
Dec 19 18:22:36 display-guest-logs.sh[1806]: Boot Loader: 4
Dec 19 18:22:36 display-guest-logs.sh[1806]: FMC: None
Dec 19 18:22:36 display-guest-logs.sh[1806]: Launch Mitigation Vector: None
Dec 19 18:22:36 display-guest-logs.sh[1806]: Current Mitigation Vector: None
Dec 19 18:22:36 display-guest-logs.sh[1806]: Signature:
Dec 19 18:22:36 display-guest-logs.sh[1806]: R:
Dec 19 18:22:36 display-guest-logs.sh[1806]: 67 D8 38 F1 45 B3 41 DF 2F D1 7D 6D D7 62 69 96
Dec 19 18:22:36 display-guest-logs.sh[1806]: 87 31 22 CF 69 5C 9B 08 3D DE 37 58 45 DB 1A E6
Dec 19 18:22:36 display-guest-logs.sh[1806]: 44 B7 4D 50 D6 CE F3 63 FC F1 53 C3 5F D2 1F E7
Dec 19 18:22:36 display-guest-logs.sh[1806]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 19 18:22:36 display-guest-logs.sh[1806]: 00 00 00 00 00 00 00 00
Dec 19 18:22:36 display-guest-logs.sh[1806]: S:
Dec 19 18:22:36 display-guest-logs.sh[1806]: DC 7B DD EF 5D 2B 73 4C 5D CF CD CE 50 99 3C 57
Dec 19 18:22:36 display-guest-logs.sh[1806]: D1 30 E7 2B DC 31 DA 08 9E 1F DE 66 C0 FE B5 65
Dec 19 18:22:36 display-guest-logs.sh[1806]: AB DE A0 29 7D 8C A1 DA 4F 6C D8 55 FF A1 69 CB
Dec 19 18:22:36 display-guest-logs.sh[1806]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 19 18:22:36 display-guest-logs.sh[1806]: 00 00 00 00 00 00 00 00
Dec 19 18:22:36 display-guest-logs.sh[1806]: Validate Request Data Attribute ...
Dec 19 18:22:36 display-guest-logs.sh[1806]: Random Request Data:
Dec 19 18:22:36 display-guest-logs.sh[1806]: 1c1a276ad5ce962323ba38cfb54d4ba20d2f764507a28691a25151efc855349631236212f4e637d6e1a97dfc6d377b242957ebbd9f7e8c29ba3058ca65a791a1
Dec 19 18:22:36 display-guest-logs.sh[1806]: Request Data from SNP Attestation Report:
Dec 19 18:22:36 display-guest-logs.sh[1806]: 1c1a276ad5ce962323ba38cfb54d4ba20d2f764507a28691a25151efc855349631236212f4e637d6e1a97dfc6d377b242957ebbd9f7e8c29ba3058ca65a791a1
Dec 19 18:22:36 display-guest-logs.sh[1806]: The random request data generated matches the snp guest report request data!
Dec 19 18:22:36 display-guest-logs.sh[1806]: Validate Measurement Attribute ...
Dec 19 18:22:36 display-guest-logs.sh[1806]: Expected Measurement:
Dec 19 18:22:36 display-guest-logs.sh[1806]: 6ae14cc330411e2d5e595a688c2380434266be09044d795bd2b438c5782de9ad
Dec 19 18:22:36 display-guest-logs.sh[1806]: Measurement from SNP Attestation Report:
Dec 19 18:22:36 display-guest-logs.sh[1806]: 6ae14cc330411e2d5e595a688c2380434266be09044d795bd2b438c5782de9ad
Dec 19 18:22:36 display-guest-logs.sh[1806]: The expected measurement matches the snp guest report measurement!