|
329 | 329 | <sect2 os="sles" xml:id="art-modules-confidential-computing"> |
330 | 330 | <!-- FIXME cwickert 2024-05-03: Revisit this when leaves tech preview to become supported |
331 | 331 | with SP7. Remove 'tech preview' and update lifecycle and support levels. --> |
332 | | - <title>Confidential Computing Technology Preview</title> |
| 332 | + <title>Confidential Computing</title> |
333 | 333 | <para> |
334 | | - This module contains a Secure Virtual Machine Service Module (SVSM), which aims to provide |
335 | | - secure services and device emulations to guest operating systems on confidential virtual |
336 | | - machines (CVMs). |
| 334 | + This module contains the necessary software packages (e.g., QEMU, libvirt) and a |
| 335 | + Confidential Computing (CoCo) kernel required to enable Host Confidential Computing for |
| 336 | + Intel TDX technology. Please be advised that this software is provided solely for |
| 337 | + demonstration and evaluation purposes. It relies on downstream patches and is strictly not |
| 338 | + intended for use in any production environment. The kernel capabilities for hosting Intel |
| 339 | + TDX will be officially integrated into the forthcoming &sle; 16. The complete tool stack |
| 340 | + required to configure Secure Virtual Machines will be delivered in a subsequent maintenance |
| 341 | + update. As a result, there are no plans to continue providing this module in |
| 342 | + &slea; 15 SP7. |
337 | 343 | </para> |
338 | 344 | <important> |
339 | 345 | <title>Technology preview</title> |
340 | 346 | <para> |
341 | | - The module is a technology preview and is not supported. Its lifecycle and support |
342 | | - options will be defined at a later stage. |
| 347 | + The module is a technology preview and is not supported. There are no plans to provide |
| 348 | + any security updates for this module as it should not be used in production systems. |
343 | 349 | </para> |
344 | 350 | </important> |
345 | 351 | <note> |
346 | | - <title>&amdsev; required</title> |
| 352 | + <title>TDX requirement</title> |
347 | 353 | <para> |
348 | | - The SVSM requires AMD Secure Encrypted Virtualization (&amdsev;) with Secure Nested |
349 | | - Paging. It will only work on AMD systems. |
| 354 | + To use Intel Trust Domain Extensions (TDX), your system must have a compatible |
| 355 | + Intel processor with built-in TDX capabilities. |
350 | 356 | </para> |
351 | 357 | </note> |
352 | 358 | <itemizedlist> |
|
0 commit comments