Masking out the Protected Processor Identification Number

2020-03-28 Thread proc...@riseup.net
Hi I was wondering if libvirt/KVM screens out a CPU's or Protected Processor Identification Number? - "PPIN" is a universal hardware serial number etched into the chip in the fab. [1] I am currently allowing full host cpu passthrough to allow guests to use spectre/meltdown mitigations. However as

Re: [libvirt-users] Emulated TPM doesn't work on Debian Buster

2019-10-07 Thread proc...@riseup.net
On 10/7/19 8:17 AM, Martin Kletzander wrote: > On Sat, Oct 05, 2019 at 02:32:19PM +0000, proc...@riseup.net wrote: >> Hi. I am very interested in the security properties a totally open TPM >> can give our usersĀ  - its use as a universal smartcard to protect all >> types

Re: [libvirt-users] Emulated TPM doesn't work on Debian Buster

2019-10-07 Thread proc...@riseup.net
On 10/7/19 7:31 AM, Andrea Bolognani wrote: > On Sat, 2019-10-05 at 14:32 +0000, proc...@riseup.net wrote: >> Hi. I am very interested in the security properties a totally open TPM >> can give our users - its use as a universal smartcard to protect all >> types of keys. Wh

[libvirt-users] Emulated TPM doesn't work on Debian Buster

2019-10-05 Thread proc...@riseup.net
Hi. I am very interested in the security properties a totally open TPM can give our usersĀ  - its use as a universal smartcard to protect all types of keys. When adding the virtual 1.2 or 2.0 TPM I get the vague error below. OS is Debian stable with standard packages. Error starting domain: