[tboot-devel] Detect if Vt-D is enabled

2017-03-23 Thread Sahil Rihan
If Vt-D is disabled in the BIOS, the DMAR table is not present. We can look for this and skip trying to perform a measured launch. This behavior of a missing DMAR table may not be true for all platforms, but in any case if the DMAR table is not present the kernel will not be able to detect/reprogra

Re: [tboot-devel] Detect if Vt-D is enabled

2017-03-23 Thread Sun, Ning
Generally, when VT-d is disabled in the BIOS, Intel TXT is also in disabled state, tboot will boot into kernel directly without triggering Getsec[senter]. Meanwhile, it looks like the testing method below is not sufficient to verify your patch, as current tboot can achieve your testing goal with