OrgACRN
/
acrn-hypervisor
mirror of https://github.com/projectacrn/acrn-hypervisor.git
1
0
Fork 0
Code Issues Releases Wiki Activity

Corrected images and formatting 

Signed-off-by: Deb Taylor <deb.taylor@intel.com>
This commit is contained in:
Deb Taylor 2019-07-23 22:04:41 -04:00 committed by David Kinder
parent ce7a126f7e
commit d0f7563d89
1 changed files with 13 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
doc/tutorials/sgx_ virtualization.rst
View File

@ -19,9 +19,10 @@ ACRN SGX virtualization support can be divided into three parts:
The image below shows the high-level design of SGX virtualization in ACRN. The image below shows the high-level design of SGX virtualization in ACRN.
.. figure:: images/sgx-1.png .. figure:: images/sgx-1.png
:align: center :scale: 50%
:align: left
SGX Virtualization in ACRN Figure 1: SGX Virtualization in ACRN
Enable SGX support for Guest Enable SGX support for Guest
@ -65,15 +66,15 @@ you must perform the following:
a) Go to the Security page: a) Go to the Security page:
.. figure:: images/sgx-1.png .. figure:: images/sgx-2.jpg
:align: center :align: left
b) Enable SGX and configure the SGX Reserved Memory size as below: * Intel #) Enable SGX and configure the SGX Reserved Memory size as below:
Software Guard Extension (SGX) -> Enabled * SGX Reserved Memory Size -> * Intel Software Guard Extension (SGX) -> Enabled
128MB * SGX Reserved Memory Size -> 128MB
.. figure:: images/sgx-2.png .. figure:: images/sgx-3.jpg
:align: center :align: left
.. note:: .. note::
Not all SGX Reserved Memory can be used as EPC. On KBL-NUC-i7, Not all SGX Reserved Memory can be used as EPC. On KBL-NUC-i7,
@ -156,7 +157,7 @@ EPC Virtualization
Enclave System Function Handling Enclave System Function Handling
******************************** ********************************
A* new "Enable ENCLS exiting" control bit (bit 15) is defined in the secondary processor-based VM execution control. A new "Enable ENCLS exiting" control bit (bit 15) is defined in the secondary processor-based VM execution control.
* 1-Setting of "Enable ENCLS exiting" enables ENCLS-exiting bitmap control, which is a new 64-bit ENCLS-exiting bitmap control field added to VMX VMCS (0202EH) to control VMEXIT on ENCLS leaf functions. * 1-Setting of "Enable ENCLS exiting" enables ENCLS-exiting bitmap control, which is a new 64-bit ENCLS-exiting bitmap control field added to VMX VMCS (0202EH) to control VMEXIT on ENCLS leaf functions.
* ACRN does not emulate ENCLS leaf functions and will not enable ENCLS exiting. * ACRN does not emulate ENCLS leaf functions and will not enable ENCLS exiting.