ubuntu 25.10 SEV version 3.0-0 #74
Description
====== SEV CERTIFICATE ======
SEV VERSION: 3.0-0
=== TEST ENVIRONMENT DETAILS ===
Host Environment Details:
Host Operating System: Ubuntu 25.10
OVMF Version: 2025.02-8ubuntu3
QEMU Version: 1:10.1.0+ds-5ubuntu2.1
Host Kernel Version: 6.17.0-8-generic
Guest Environment Details:
Guest Operating System: Ubuntu 25.10
Guest Kernel version: 6.17.0-8-generic
=== SUMMARY ===
[ ✅ ] SEV VERSION 3.0-0 SNP HOST TESTS
✅ snphost-ok.service : Run snphost ok to make sure host is correctly set-up for SNP functionalities....
✅ calculate-measurement.service : Calculate guest measurement...
✅ verify-guest.service : Verify the SEV-SNP guest booted correctly...
✅ display-guest-logs.service : Show the guest logs for the appropriate services in the host...
[ ✅ ] SEV VERSION 3.0-0 SNP GUEST TESTS
✅ snpguest-ok.service : Run snguest ok to verify SNP enablement on guest...
✅ snpguest-attestation.service : Run SNP Regular Attestation after boot...
✅ Generation of SNP Guest Report
✅ Fetch of CA certificate chain
✅ Fetch of VCEK certificate chain
✅ Verification of ARK, ASK and VCEK cert-chain
✅ Verification of SNP Attestation Report
✅ Display of SNP Attestation Report
=== SEV VERSION 3.0-0 LOG ===
Dec 17 22:58:02 systemd[1]: Starting calculate-measurement.service - Calculate guest measurement...
Dec 17 22:58:02 systemd[1]: Starting snphost-ok.service - Run snphost ok to make sure host is correctly set-up for SNP functionalities....
Dec 17 22:58:02 snphost[3095]: [ PASS ] - AMD CPU
Dec 17 22:58:02 snphost[3095]: [ PASS ] - Microcode support
Dec 17 22:58:02 snphost[3095]: [ PASS ] - Secure Memory Encryption (SME)
Dec 17 22:58:02 snphost[3095]: [ PASS ] - SME: Enabled in MSR
Dec 17 22:58:02 snphost[3095]: [ PASS ] - Secure Encrypted Virtualization (SEV)
Dec 17 22:58:02 snphost[3095]: [ PASS ] - SEV firmware version: 1.55
Dec 17 22:58:02 snphost[3095]: [ PASS ] - Encrypted State (SEV-ES)
Dec 17 22:58:02 snphost[3095]: [ PASS ] - SEV-ES initialized
Dec 17 22:58:02 snphost[3095]: [ PASS ] - SEV initialized: Initialized, no guests running
Dec 17 22:58:02 snphost[3095]: [ PASS ] - Secure Nested Paging (SEV-SNP)
Dec 17 22:58:02 snphost[3095]: [ PASS ] - VM Permission Levels
Dec 17 22:58:02 snphost[3095]: [ PASS ] - Number of VMPLs: 4
Dec 17 22:58:02 snphost[3095]: [ PASS ] - SNP: Enabled in MSR
Dec 17 22:58:02 snphost[3095]: [ PASS ] - SNP initialized
Dec 17 22:58:02 snphost[3095]: [ PASS ] - RMP table addresses: 0xdf5f600000 - 0xe03fafffff
Dec 17 22:58:02 snphost[3095]: [ PASS ] - RMP table initialized
Dec 17 22:58:02 snphost[3095]: [ PASS ] - Alias check: Completed since last system update, no aliasing addresses
Dec 17 22:58:02 snphost[3095]: [ PASS ] - Physical address bit reduction: 5
Dec 17 22:58:02 snphost[3095]: [ PASS ] - C-bit location: 51
Dec 17 22:58:02 snphost[3095]: [ PASS ] - Number of encrypted guests supported simultaneously: 509
Dec 17 22:58:02 snphost[3095]: [ PASS ] - Minimum ASID value for SEV-enabled, SEV-ES disabled guest: 100
Dec 17 22:58:02 snphost[3095]: [ PASS ] - /dev/sev readable
Dec 17 22:58:02 snphost[3095]: [ PASS ] - /dev/sev writable
Dec 17 22:58:02 snphost[3095]: [ PASS ] - Page flush MSR: ENABLED
Dec 17 22:58:02 snphost[3095]: [ PASS ] - KVM supported: API version: 12
Dec 17 22:58:02 snphost[3095]: [ PASS ] - SEV enabled in KVM
Dec 17 22:58:02 snphost[3095]: [ PASS ] - SEV-ES enabled in KVM
Dec 17 22:58:02 snphost[3095]: [ PASS ] - SEV-SNP enabled in KVM
Dec 17 22:58:02 snphost[3095]: [ PASS ] - Memlock resource limit: Soft: 8388608 | Hard: 8388608
Dec 17 22:58:02 snphost[3095]: [ PASS ] - Comparing TCB values: TCB versions match
Dec 17 22:58:02 snphost[3095]: Platform TCB version: TCB Version:
Dec 17 22:58:02 snphost[3095]: Microcode: 219
Dec 17 22:58:02 snphost[3095]: SNP: 25
Dec 17 22:58:02 snphost[3095]: TEE: 0
Dec 17 22:58:02 snphost[3095]: Boot Loader: 4
Dec 17 22:58:02 snphost[3095]: FMC: None
Dec 17 22:58:02 snphost[3095]: Reported TCB version: TCB Version:
Dec 17 22:58:02 snphost[3095]: Microcode: 219
Dec 17 22:58:02 snphost[3095]: SNP: 25
Dec 17 22:58:02 snphost[3095]: TEE: 0
Dec 17 22:58:02 snphost[3095]: Boot Loader: 4
Dec 17 22:58:02 snphost[3095]: FMC: None
Dec 17 22:58:02 systemd[1]: snphost-ok.service: Deactivated successfully.
Dec 17 22:58:02 systemd[1]: Finished snphost-ok.service - Run snphost ok to make sure host is correctly set-up for SNP functionalities..
Dec 17 22:58:02 guest_measurement.sh[2836]: 0x8807c29075d710c8762d24f935235fd15cb1ed6db991a20e968164b4c6f97d6c8bc648b04a8b1a17b2f57795217fbfe5
Dec 17 22:58:02 systemd[1]: calculate-measurement.service: Deactivated successfully.
Dec 17 22:58:02 systemd[1]: Finished calculate-measurement.service - Calculate guest measurement.
Dec 17 22:58:02 systemd[1]: calculate-measurement.service: Consumed 323ms CPU time, 243M memory peak.
Dec 17 22:58:02 systemd[1]: Starting verify-guest.service - Verify the SEV-SNP guest booted correctly...
Dec 17 22:58:19 verify-guest.sh[3115]: Guest boot successful.
Dec 17 22:58:19 systemd[1]: verify-guest.service: Deactivated successfully.
Dec 17 22:58:19 systemd[1]: Finished verify-guest.service - Verify the SEV-SNP guest booted correctly.
Dec 17 22:58:19 systemd[1]: Starting display-guest-logs.service - Show the guest logs for the appropriate services in the host...
Dec 17 22:58:21 display-guest-logs.sh[3176]: SEV-SNP guest test results:
Dec 17 22:58:21 display-guest-logs.sh[3176]: For more information check journals in /var/log/journal/guest-logs
Dec 17 22:58:21 display-guest-logs.sh[3176]: Starting snpguest-ok.service - Run snguest ok to verify SNP enablement on guest...
Dec 17 22:58:21 display-guest-logs.sh[3176]: [ PASS ] - SEV: ENABLED
Dec 17 22:58:21 display-guest-logs.sh[3176]: [ PASS ] - SEV-ES: ENABLED
Dec 17 22:58:21 display-guest-logs.sh[3176]: [ PASS ] - SNP: ENABLED
Dec 17 22:58:21 display-guest-logs.sh[3176]: [ PASS ] - Optional Features statuses:
Dec 17 22:58:21 display-guest-logs.sh[3176]: [ PASS ] - VTOM: DISABLED
Dec 17 22:58:21 display-guest-logs.sh[3176]: [ PASS ] - ReflectVC: DISABLED
Dec 17 22:58:21 display-guest-logs.sh[3176]: [ PASS ] - Restricted Injection: DISABLED
Dec 17 22:58:21 display-guest-logs.sh[3176]: [ PASS ] - Alternate Injection: DISABLED
Dec 17 22:58:21 display-guest-logs.sh[3176]: [ PASS ] - Debug Swap: DISABLED
Dec 17 22:58:21 display-guest-logs.sh[3176]: [ PASS ] - Prevent Host IBS: DISABLED
Dec 17 22:58:21 display-guest-logs.sh[3176]: [ PASS ] - SNP BTB Isolation: DISABLED
Dec 17 22:58:21 display-guest-logs.sh[3176]: [ PASS ] - VMPL SSS: DISABLED
Dec 17 22:58:21 display-guest-logs.sh[3176]: [ PASS ] - Secure TSE: DISABLED
Dec 17 22:58:21 display-guest-logs.sh[3176]: [ PASS ] - VMG Exit Parameter: DISABLED
Dec 17 22:58:21 display-guest-logs.sh[3176]: [ PASS ] - IBS Virtualization: DISABLED
Dec 17 22:58:21 display-guest-logs.sh[3176]: [ PASS ] - VMSA Reg Prot: DISABLED
Dec 17 22:58:21 display-guest-logs.sh[3176]: [ PASS ] - SMT Protection: DISABLED
Dec 17 22:58:21 display-guest-logs.sh[3176]: snpguest-ok.service: Deactivated successfully.
Dec 17 22:58:21 display-guest-logs.sh[3176]: Finished snpguest-ok.service - Run snguest ok to verify SNP enablement on guest.
Dec 17 22:58:21 display-guest-logs.sh[3176]: Perform Regular Attestation workflow using snpguest tool ...
Dec 17 22:58:21 display-guest-logs.sh[3176]: Starting snpguest-attestation.service - Run SNP Regular Attestation after boot...
Dec 17 22:58:21 display-guest-logs.sh[3176]: The AMD ARK was self-signed!
Dec 17 22:58:21 display-guest-logs.sh[3176]: The AMD ASK was signed by the AMD ARK!
Dec 17 22:58:21 display-guest-logs.sh[3176]: The VCEK was signed by the AMD ASK!
Dec 17 22:58:21 display-guest-logs.sh[3176]: Reported TCB Boot Loader from certificate matches the attestation report.
Dec 17 22:58:21 display-guest-logs.sh[3176]: Reported TCB TEE from certificate matches the attestation report.
Dec 17 22:58:21 display-guest-logs.sh[3176]: Reported TCB SNP from certificate matches the attestation report.
Dec 17 22:58:21 display-guest-logs.sh[3176]: Reported TCB Microcode from certificate matches the attestation report.
Dec 17 22:58:21 display-guest-logs.sh[3176]: VEK signed the Attestation Report!
Dec 17 22:58:21 display-guest-logs.sh[3176]: Attestation Report:
Dec 17 22:58:21 display-guest-logs.sh[3176]: Version: 4
Dec 17 22:58:21 display-guest-logs.sh[3176]: Guest SVN: 0
Dec 17 22:58:21 display-guest-logs.sh[3176]: Guest Policy (0x30000):
Dec 17 22:58:21 display-guest-logs.sh[3176]: ABI Major: 0
Dec 17 22:58:21 display-guest-logs.sh[3176]: ABI Minor: 0
Dec 17 22:58:21 display-guest-logs.sh[3176]: SMT Allowed: true
Dec 17 22:58:21 display-guest-logs.sh[3176]: Migrate MA: false
Dec 17 22:58:21 display-guest-logs.sh[3176]: Debug Allowed: false
Dec 17 22:58:21 display-guest-logs.sh[3176]: Single Socket: false
Dec 17 22:58:21 display-guest-logs.sh[3176]: CXL Allowed: false
Dec 17 22:58:21 display-guest-logs.sh[3176]: AEX 256 XTS: false
Dec 17 22:58:21 display-guest-logs.sh[3176]: RAPL Allowed: false
Dec 17 22:58:21 display-guest-logs.sh[3176]: Ciphertext hiding: false
Dec 17 22:58:21 display-guest-logs.sh[3176]: Page Swap Disable: false
Dec 17 22:58:21 display-guest-logs.sh[3176]: Family ID:
Dec 17 22:58:21 display-guest-logs.sh[3176]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 17 22:58:21 display-guest-logs.sh[3176]: Image ID:
Dec 17 22:58:21 display-guest-logs.sh[3176]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 17 22:58:21 display-guest-logs.sh[3176]: VMPL: 1
Dec 17 22:58:21 display-guest-logs.sh[3176]: Signature Algorithm: 1
Dec 17 22:58:21 display-guest-logs.sh[3176]: Current TCB:
Dec 17 22:58:21 display-guest-logs.sh[3176]: TCB Version:
Dec 17 22:58:21 display-guest-logs.sh[3176]: Microcode: 219
Dec 17 22:58:21 display-guest-logs.sh[3176]: SNP: 25
Dec 17 22:58:21 display-guest-logs.sh[3176]: TEE: 0
Dec 17 22:58:21 display-guest-logs.sh[3176]: Boot Loader: 4
Dec 17 22:58:21 display-guest-logs.sh[3176]: FMC: None
Dec 17 22:58:21 display-guest-logs.sh[3176]: Platform Info (39):
Dec 17 22:58:21 display-guest-logs.sh[3176]: SMT Enabled: true
Dec 17 22:58:21 display-guest-logs.sh[3176]: TSME Enabled: true
Dec 17 22:58:21 display-guest-logs.sh[3176]: ECC Enabled: true
Dec 17 22:58:21 display-guest-logs.sh[3176]: RAPL Disabled: false
Dec 17 22:58:21 display-guest-logs.sh[3176]: Ciphertext Hiding Enabled: false
Dec 17 22:58:21 display-guest-logs.sh[3176]: Alias Check Complete: true
Dec 17 22:58:21 display-guest-logs.sh[3176]: SEV-TIO Enabled: false
Dec 17 22:58:21 display-guest-logs.sh[3176]: Key Information:
Dec 17 22:58:21 display-guest-logs.sh[3176]: author key enabled: false
Dec 17 22:58:21 display-guest-logs.sh[3176]: mask chip key: false
Dec 17 22:58:21 display-guest-logs.sh[3176]: signing key: vcek
Dec 17 22:58:21 display-guest-logs.sh[3176]: Report Data:
Dec 17 22:58:21 display-guest-logs.sh[3176]: 09 BF 9C E7 A6 B2 BA 7F DC A6 1D 4F 37 EC A2 D4
Dec 17 22:58:21 display-guest-logs.sh[3176]: 43 A7 1E 86 62 57 10 60 CD 58 BB 3C DE 6A B5 B1
Dec 17 22:58:21 display-guest-logs.sh[3176]: 7A E7 51 A4 C9 8C 82 66 9F 90 35 F5 F5 E6 67 6D
Dec 17 22:58:21 display-guest-logs.sh[3176]: 09 44 08 1E 1F 17 83 6A 75 D5 8E 24 ED 14 C7 E0
Dec 17 22:58:21 display-guest-logs.sh[3176]: Measurement:
Dec 17 22:58:21 display-guest-logs.sh[3176]: 88 07 C2 90 75 D7 10 C8 76 2D 24 F9 35 23 5F D1
Dec 17 22:58:21 display-guest-logs.sh[3176]: 5C B1 ED 6D B9 91 A2 0E 96 81 64 B4 C6 F9 7D 6C
Dec 17 22:58:21 display-guest-logs.sh[3176]: 8B C6 48 B0 4A 8B 1A 17 B2 F5 77 95 21 7F BF E5
Dec 17 22:58:21 display-guest-logs.sh[3176]: Host Data:
Dec 17 22:58:21 display-guest-logs.sh[3176]: 48 DD 26 54 C9 6B 3E 0D 34 8A 6D 56 49 A5 D5 28
Dec 17 22:58:21 display-guest-logs.sh[3176]: 00 50 84 B7 65 6B F1 39 75 15 DB 18 12 CC 0C D1
Dec 17 22:58:21 display-guest-logs.sh[3176]: ID Key Digest:
Dec 17 22:58:21 display-guest-logs.sh[3176]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 17 22:58:21 display-guest-logs.sh[3176]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 17 22:58:21 display-guest-logs.sh[3176]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 17 22:58:21 display-guest-logs.sh[3176]: Author Key Digest:
Dec 17 22:58:21 display-guest-logs.sh[3176]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 17 22:58:21 display-guest-logs.sh[3176]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 17 22:58:21 display-guest-logs.sh[3176]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 17 22:58:21 display-guest-logs.sh[3176]: Report ID:
Dec 17 22:58:21 display-guest-logs.sh[3176]: C8 82 90 85 AA 73 4C 5B 5E BC 64 5D F8 B9 A2 81
Dec 17 22:58:21 display-guest-logs.sh[3176]: F2 27 91 CB 35 FD E9 19 C4 28 C8 2E 51 73 41 32
Dec 17 22:58:21 display-guest-logs.sh[3176]: Report ID Migration Agent:
Dec 17 22:58:21 display-guest-logs.sh[3176]: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Dec 17 22:58:21 display-guest-logs.sh[3176]: snpguest-attestation.service: Deactivated successfully.
Dec 17 22:58:21 display-guest-logs.sh[3176]: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Dec 17 22:58:21 display-guest-logs.sh[3176]: Reported TCB:
Dec 17 22:58:21 display-guest-logs.sh[3176]: TCB Version:
Dec 17 22:58:21 display-guest-logs.sh[3176]: Microcode: 219
Dec 17 22:58:21 display-guest-logs.sh[3176]: SNP: 25
Dec 17 22:58:21 display-guest-logs.sh[3176]: TEE: 0
Dec 17 22:58:21 display-guest-logs.sh[3176]: Boot Loader: 4
Dec 17 22:58:21 display-guest-logs.sh[3176]: FMC: None
Dec 17 22:58:21 display-guest-logs.sh[3176]: CPUID Family ID: 25
Dec 17 22:58:21 display-guest-logs.sh[3176]: CPUID Model ID: 1
Dec 17 22:58:21 display-guest-logs.sh[3176]: CPUID Stepping: 1
Dec 17 22:58:21 display-guest-logs.sh[3176]: Chip ID:
Dec 17 22:58:21 display-guest-logs.sh[3176]: 2E A1 5A D0 4B 18 7E 48 04 67 40 12 09 01 EB 0D
Dec 17 22:58:21 display-guest-logs.sh[3176]: 99 A0 68 9A 2F 53 24 97 59 60 B7 0B F9 C4 D6 60
Dec 17 22:58:21 display-guest-logs.sh[3176]: 0F 3F 7A 7E B8 C6 30 C5 E0 32 2E CD 11 8E CD 2C
Dec 17 22:58:21 systemd[1]: display-guest-logs.service: Deactivated successfully.
Dec 17 22:58:21 display-guest-logs.sh[3176]: 51 15 82 4E 18 D5 BF 52 CC 7F 28 66 80 F3 62 B7
Dec 17 22:58:21 display-guest-logs.sh[3176]: Committed TCB:
Dec 17 22:58:21 display-guest-logs.sh[3176]: TCB Version:
Dec 17 22:58:21 display-guest-logs.sh[3176]: Microcode: 219
Dec 17 22:58:21 display-guest-logs.sh[3176]: SNP: 25
Dec 17 22:58:21 display-guest-logs.sh[3176]: TEE: 0
Dec 17 22:58:21 display-guest-logs.sh[3176]: Boot Loader: 4
Dec 17 22:58:21 display-guest-logs.sh[3176]: FMC: None
Dec 17 22:58:21 display-guest-logs.sh[3176]: Current Version: 1.55.31
Dec 17 22:58:21 display-guest-logs.sh[3176]: Committed Version: 1.55.31
Dec 17 22:58:21 display-guest-logs.sh[3176]: Launch TCB:
Dec 17 22:58:21 display-guest-logs.sh[3176]: TCB Version:
Dec 17 22:58:21 display-guest-logs.sh[3176]: Microcode: 219
Dec 17 22:58:21 display-guest-logs.sh[3176]: SNP: 25
Dec 17 22:58:21 display-guest-logs.sh[3176]: TEE: 0
Dec 17 22:58:21 display-guest-logs.sh[3176]: Boot Loader: 4
Dec 17 22:58:21 display-guest-logs.sh[3176]: FMC: None
Dec 17 22:58:21 display-guest-logs.sh[3176]: Launch Mitigation Vector: None
Dec 17 22:58:21 display-guest-logs.sh[3176]: Current Mitigation Vector: None
Dec 17 22:58:21 display-guest-logs.sh[3176]: Signature:
Dec 17 22:58:21 display-guest-logs.sh[3176]: R:
Dec 17 22:58:21 display-guest-logs.sh[3176]: 2F 21 D6 2F CC F9 C3 8A AD 4C 37 C9 3C 3C 66 04
Dec 17 22:58:21 display-guest-logs.sh[3176]: D5 11 2E C4 B3 BA 32 D8 44 5B 3C 75 46 6B C7 F6
Dec 17 22:58:21 display-guest-logs.sh[3176]: 8F 2C 1A 89 D9 DB 64 A1 FC B3 DC 04 D5 BF D9 28
Dec 17 22:58:21 display-guest-logs.sh[3176]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 17 22:58:21 display-guest-logs.sh[3176]: 00 00 00 00 00 00 00 00
Dec 17 22:58:21 display-guest-logs.sh[3176]: S:
Dec 17 22:58:21 display-guest-logs.sh[3176]: 17 F6 D1 B8 77 1D 36 9A 0F 45 DF F3 7E 96 09 96
Dec 17 22:58:21 display-guest-logs.sh[3176]: 4C 4C 53 15 6E BA 86 46 51 42 D3 D9 52 37 24 13
Dec 17 22:58:21 display-guest-logs.sh[3176]: 68 FD D1 61 C4 2E 80 6E 2A CA 72 1E 8F E5 0A CE
Dec 17 22:58:21 display-guest-logs.sh[3176]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 17 22:58:21 display-guest-logs.sh[3176]: 00 00 00 00 00 00 00 00
Dec 17 22:58:21 display-guest-logs.sh[3176]: SNP Attestation Report generated successfully !!
Dec 17 22:58:21 display-guest-logs.sh[3176]: Attestation Report:
Dec 17 22:58:21 display-guest-logs.sh[3176]: Version: 4
Dec 17 22:58:21 display-guest-logs.sh[3176]: Guest SVN: 0
Dec 17 22:58:21 display-guest-logs.sh[3176]: Guest Policy (0x30000):
Dec 17 22:58:21 display-guest-logs.sh[3176]: ABI Major: 0
Dec 17 22:58:21 display-guest-logs.sh[3176]: ABI Minor: 0
Dec 17 22:58:21 display-guest-logs.sh[3176]: SMT Allowed: true
Dec 17 22:58:21 display-guest-logs.sh[3176]: Migrate MA: false
Dec 17 22:58:21 display-guest-logs.sh[3176]: Debug Allowed: false
Dec 17 22:58:21 display-guest-logs.sh[3176]: Single Socket: false
Dec 17 22:58:21 display-guest-logs.sh[3176]: CXL Allowed: false
Dec 17 22:58:21 display-guest-logs.sh[3176]: AEX 256 XTS: false
Dec 17 22:58:21 display-guest-logs.sh[3176]: RAPL Allowed: false
Dec 17 22:58:21 display-guest-logs.sh[3176]: Ciphertext hiding: false
Dec 17 22:58:21 display-guest-logs.sh[3176]: Page Swap Disable: false
Dec 17 22:58:21 display-guest-logs.sh[3176]: Family ID:
Dec 17 22:58:21 display-guest-logs.sh[3176]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 17 22:58:21 display-guest-logs.sh[3176]: Image ID:
Dec 17 22:58:21 display-guest-logs.sh[3176]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 17 22:58:21 display-guest-logs.sh[3176]: VMPL: 1
Dec 17 22:58:21 display-guest-logs.sh[3176]: Signature Algorithm: 1
Dec 17 22:58:21 display-guest-logs.sh[3176]: Current TCB:
Dec 17 22:58:21 display-guest-logs.sh[3176]: TCB Version:
Dec 17 22:58:21 display-guest-logs.sh[3176]: Microcode: 219
Dec 17 22:58:21 display-guest-logs.sh[3176]: SNP: 25
Dec 17 22:58:21 display-guest-logs.sh[3176]: TEE: 0
Dec 17 22:58:21 display-guest-logs.sh[3176]: Boot Loader: 4
Dec 17 22:58:21 display-guest-logs.sh[3176]: FMC: None
Dec 17 22:58:21 display-guest-logs.sh[3176]: Platform Info (39):
Dec 17 22:58:21 display-guest-logs.sh[3176]: Finished snpguest-attestation.service - Run SNP Regular Attestation after boot.
Dec 17 22:58:21 display-guest-logs.sh[3176]: SMT Enabled: true
Dec 17 22:58:21 display-guest-logs.sh[3176]: TSME Enabled: true
Dec 17 22:58:21 display-guest-logs.sh[3176]: ECC Enabled: true
Dec 17 22:58:21 display-guest-logs.sh[3176]: RAPL Disabled: false
Dec 17 22:58:21 display-guest-logs.sh[3176]: Ciphertext Hiding Enabled: false
Dec 17 22:58:21 display-guest-logs.sh[3176]: Alias Check Complete: true
Dec 17 22:58:21 display-guest-logs.sh[3176]: SEV-TIO Enabled: false
Dec 17 22:58:21 display-guest-logs.sh[3176]: Key Information:
Dec 17 22:58:21 display-guest-logs.sh[3176]: author key enabled: false
Dec 17 22:58:21 display-guest-logs.sh[3176]: mask chip key: false
Dec 17 22:58:21 display-guest-logs.sh[3176]: signing key: vcek
Dec 17 22:58:21 display-guest-logs.sh[3176]: Report Data:
Dec 17 22:58:21 systemd[1]: Finished display-guest-logs.service - Show the guest logs for the appropriate services in the host.
Dec 17 22:58:21 display-guest-logs.sh[3176]: 09 BF 9C E7 A6 B2 BA 7F DC A6 1D 4F 37 EC A2 D4
Dec 17 22:58:21 display-guest-logs.sh[3176]: 43 A7 1E 86 62 57 10 60 CD 58 BB 3C DE 6A B5 B1
Dec 17 22:58:21 display-guest-logs.sh[3176]: 7A E7 51 A4 C9 8C 82 66 9F 90 35 F5 F5 E6 67 6D
Dec 17 22:58:21 display-guest-logs.sh[3176]: 09 44 08 1E 1F 17 83 6A 75 D5 8E 24 ED 14 C7 E0
Dec 17 22:58:21 display-guest-logs.sh[3176]: Measurement:
Dec 17 22:58:21 display-guest-logs.sh[3176]: 88 07 C2 90 75 D7 10 C8 76 2D 24 F9 35 23 5F D1
Dec 17 22:58:21 display-guest-logs.sh[3176]: 5C B1 ED 6D B9 91 A2 0E 96 81 64 B4 C6 F9 7D 6C
Dec 17 22:58:21 display-guest-logs.sh[3176]: 8B C6 48 B0 4A 8B 1A 17 B2 F5 77 95 21 7F BF E5
Dec 17 22:58:21 display-guest-logs.sh[3176]: Host Data:
Dec 17 22:58:21 display-guest-logs.sh[3176]: 48 DD 26 54 C9 6B 3E 0D 34 8A 6D 56 49 A5 D5 28
Dec 17 22:58:21 display-guest-logs.sh[3176]: 00 50 84 B7 65 6B F1 39 75 15 DB 18 12 CC 0C D1
Dec 17 22:58:21 display-guest-logs.sh[3176]: ID Key Digest:
Dec 17 22:58:21 display-guest-logs.sh[3176]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 17 22:58:21 display-guest-logs.sh[3176]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 17 22:58:21 display-guest-logs.sh[3176]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 17 22:58:21 display-guest-logs.sh[3176]: Author Key Digest:
Dec 17 22:58:21 display-guest-logs.sh[3176]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 17 22:58:21 display-guest-logs.sh[3176]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 17 22:58:21 display-guest-logs.sh[3176]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 17 22:58:21 display-guest-logs.sh[3176]: Report ID:
Dec 17 22:58:21 display-guest-logs.sh[3176]: C8 82 90 85 AA 73 4C 5B 5E BC 64 5D F8 B9 A2 81
Dec 17 22:58:21 display-guest-logs.sh[3176]: F2 27 91 CB 35 FD E9 19 C4 28 C8 2E 51 73 41 32
Dec 17 22:58:21 display-guest-logs.sh[3176]: Report ID Migration Agent:
Dec 17 22:58:21 display-guest-logs.sh[3176]: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Dec 17 22:58:21 display-guest-logs.sh[3176]: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Dec 17 22:58:21 display-guest-logs.sh[3176]: Reported TCB:
Dec 17 22:58:21 display-guest-logs.sh[3176]: TCB Version:
Dec 17 22:58:21 display-guest-logs.sh[3176]: Microcode: 219
Dec 17 22:58:21 display-guest-logs.sh[3176]: SNP: 25
Dec 17 22:58:21 display-guest-logs.sh[3176]: TEE: 0
Dec 17 22:58:21 display-guest-logs.sh[3176]: Boot Loader: 4
Dec 17 22:58:21 display-guest-logs.sh[3176]: FMC: None
Dec 17 22:58:21 display-guest-logs.sh[3176]: CPUID Family ID: 25
Dec 17 22:58:21 display-guest-logs.sh[3176]: CPUID Model ID: 1
Dec 17 22:58:21 display-guest-logs.sh[3176]: CPUID Stepping: 1
Dec 17 22:58:21 display-guest-logs.sh[3176]: Chip ID:
Dec 17 22:58:21 display-guest-logs.sh[3176]: 2E A1 5A D0 4B 18 7E 48 04 67 40 12 09 01 EB 0D
Dec 17 22:58:21 display-guest-logs.sh[3176]: 99 A0 68 9A 2F 53 24 97 59 60 B7 0B F9 C4 D6 60
Dec 17 22:58:21 display-guest-logs.sh[3176]: 0F 3F 7A 7E B8 C6 30 C5 E0 32 2E CD 11 8E CD 2C
Dec 17 22:58:21 display-guest-logs.sh[3176]: 51 15 82 4E 18 D5 BF 52 CC 7F 28 66 80 F3 62 B7
Dec 17 22:58:21 display-guest-logs.sh[3176]: Committed TCB:
Dec 17 22:58:21 display-guest-logs.sh[3176]: TCB Version:
Dec 17 22:58:21 display-guest-logs.sh[3176]: Microcode: 219
Dec 17 22:58:21 display-guest-logs.sh[3176]: SNP: 25
Dec 17 22:58:21 display-guest-logs.sh[3176]: TEE: 0
Dec 17 22:58:21 display-guest-logs.sh[3176]: Boot Loader: 4
Dec 17 22:58:21 display-guest-logs.sh[3176]: FMC: None
Dec 17 22:58:21 display-guest-logs.sh[3176]: Current Version: 1.55.31
Dec 17 22:58:21 display-guest-logs.sh[3176]: Committed Version: 1.55.31
Dec 17 22:58:21 display-guest-logs.sh[3176]: Launch TCB:
Dec 17 22:58:21 display-guest-logs.sh[3176]: TCB Version:
Dec 17 22:58:21 display-guest-logs.sh[3176]: Microcode: 219
Dec 17 22:58:21 display-guest-logs.sh[3176]: SNP: 25
Dec 17 22:58:21 display-guest-logs.sh[3176]: TEE: 0
Dec 17 22:58:21 display-guest-logs.sh[3176]: Boot Loader: 4
Dec 17 22:58:21 display-guest-logs.sh[3176]: FMC: None
Dec 17 22:58:21 display-guest-logs.sh[3176]: Launch Mitigation Vector: None
Dec 17 22:58:21 display-guest-logs.sh[3176]: Current Mitigation Vector: None
Dec 17 22:58:21 display-guest-logs.sh[3176]: Signature:
Dec 17 22:58:21 display-guest-logs.sh[3176]: R:
Dec 17 22:58:21 display-guest-logs.sh[3176]: 2F 21 D6 2F CC F9 C3 8A AD 4C 37 C9 3C 3C 66 04
Dec 17 22:58:21 display-guest-logs.sh[3176]: D5 11 2E C4 B3 BA 32 D8 44 5B 3C 75 46 6B C7 F6
Dec 17 22:58:21 display-guest-logs.sh[3176]: 8F 2C 1A 89 D9 DB 64 A1 FC B3 DC 04 D5 BF D9 28
Dec 17 22:58:21 display-guest-logs.sh[3176]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 17 22:58:21 display-guest-logs.sh[3176]: 00 00 00 00 00 00 00 00
Dec 17 22:58:21 display-guest-logs.sh[3176]: S:
Dec 17 22:58:21 display-guest-logs.sh[3176]: 17 F6 D1 B8 77 1D 36 9A 0F 45 DF F3 7E 96 09 96
Dec 17 22:58:21 display-guest-logs.sh[3176]: 4C 4C 53 15 6E BA 86 46 51 42 D3 D9 52 37 24 13
Dec 17 22:58:21 display-guest-logs.sh[3176]: 68 FD D1 61 C4 2E 80 6E 2A CA 72 1E 8F E5 0A CE
Dec 17 22:58:21 display-guest-logs.sh[3176]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 17 22:58:21 display-guest-logs.sh[3176]: 00 00 00 00 00 00 00 00
Dec 17 22:58:21 display-guest-logs.sh[3176]: Validate Request Data Attribute ...
Dec 17 22:58:21 display-guest-logs.sh[3176]: Random Request Data:
Dec 17 22:58:21 display-guest-logs.sh[3176]: 09bf9ce7a6b2ba7fdca61d4f37eca2d443a71e8662571060cd58bb3cde6ab5b17ae751a4c98c82669f9035f5f5e6676d0944081e1f17836a75d58e24ed14c7e0
Dec 17 22:58:21 display-guest-logs.sh[3176]: Request Data from SNP Attestation Report:
Dec 17 22:58:21 display-guest-logs.sh[3176]: 09bf9ce7a6b2ba7fdca61d4f37eca2d443a71e8662571060cd58bb3cde6ab5b17ae751a4c98c82669f9035f5f5e6676d0944081e1f17836a75d58e24ed14c7e0
Dec 17 22:58:21 display-guest-logs.sh[3176]: The random request data generated matches the snp guest report request data!
Dec 17 22:58:21 display-guest-logs.sh[3176]: Validate Measurement Attribute ...
Dec 17 22:58:21 display-guest-logs.sh[3176]: Expected Measurement:
Dec 17 22:58:21 display-guest-logs.sh[3176]: 48dd2654c96b3e0d348a6d5649a5d528005084b7656bf1397515db1812cc0cd1
Dec 17 22:58:21 display-guest-logs.sh[3176]: Measurement from SNP Attestation Report:
Dec 17 22:58:21 display-guest-logs.sh[3176]: 48dd2654c96b3e0d348a6d5649a5d528005084b7656bf1397515db1812cc0cd1
Dec 17 22:58:21 display-guest-logs.sh[3176]: The expected measurement matches the snp guest report measurement!