Module tdx_guest::tdcall

source ·
Expand description

The TDCALL instruction causes a VM exit to the Intel TDX module. It is used to call guest-side Intel TDX functions. For more information about TDCALL, please refer to the Intel® TDX Module v1.5 ABI Specification

Structs§

  • GPA Attributes (Single VM) Definition.
  • GPA Attributes (all VMs) Definition.
  • GuestTdAttributes is defined as a 64b field that specifies various guest TD attributes. It is reported to the guest TD by TDG.VP.INFO and as part of TDREPORT_STRUCT returned by TDG.MR.REPORT.
  • REPORTTYPE indicates the reported Trusted Execution Environment (TEE) type, sub-type and version.
  • TDINFO_STRUCT is defined as the TDX-specific TEE_INFO part of TDG.MR.REPORT. It contains the measurements and initial configuration of the TD that was locked at initialization and a set of measurement registers that are run-time extendable. These values are copied from the TDCS by the TDG.MR.REPORT function. Refer to the [TDX Module Base Spec] for additional details.

Enums§

Functions§

  • Accept a pending private page and initialize it to all-0 using the TD ephemeral private key.
  • Extend a TDCS.RTMR measurement register.
  • TDG.MR.REPORT creates a TDREPORT_STRUCT structure that contains the measurements/configuration information of the guest TD that called the function, measurements/configuration information of the Intel TDX module and a REPORTMACSTRUCT.
  • Get guest TD execution environment information.
  • Get Virtualization Exception Information for the recent #VE exception.
  • Read the GPA mapping and attributes of a TD private page.
  • As a service TD, read a metadata field (control structure field) of a target TD.
  • Read a TD-scope metadata field (control structure field) of a TD.
  • TDG.VP.CPUIDVE.SET controls unconditional #VE on CPUID execution by the guest TD.
  • Verify a cryptographic REPORTMACSTRUCT that describes the contents of a TD, to determine that it was created on the current TEE on the current platform.
  • Write the attributes of a private page. Create or remove L2 page aliases as required.
  • As a service TD, write a metadata field (control structure field) of a target TD.
  • Write a TD-scope metadata field (control structure field) of a TD.