Re: [RFC PATCH v3 15/20] x86: Check for memory encryption on the APs

2016-11-29 Thread Tom Lendacky
On 11/22/2016 1:25 PM, Borislav Petkov wrote: > On Wed, Nov 09, 2016 at 06:37:40PM -0600, Tom Lendacky wrote: >> Add support to check if memory encryption is active in the kernel and that >> it has been enabled on the AP. If memory encryption is active in the kernel >> but has not been enabled on

Re: [RFC PATCH v3 15/20] x86: Check for memory encryption on the APs

2016-11-22 Thread Borislav Petkov
On Wed, Nov 09, 2016 at 06:37:40PM -0600, Tom Lendacky wrote: > Add support to check if memory encryption is active in the kernel and that > it has been enabled on the AP. If memory encryption is active in the kernel > but has not been enabled on the AP then do not allow the AP to continue > start

[RFC PATCH v3 15/20] x86: Check for memory encryption on the APs

2016-11-09 Thread Tom Lendacky
Add support to check if memory encryption is active in the kernel and that it has been enabled on the AP. If memory encryption is active in the kernel but has not been enabled on the AP then do not allow the AP to continue start up. Signed-off-by: Tom Lendacky ---