Xen project Mailing List

Reg. Tee init fail...

To: "XEN-USERS@xxxxxxxxxxxxxxxxxxxx" <XEN-USERS@xxxxxxxxxxxxxxxxxxxx>

From: "SK, SivaSangeetha (Siva Sangeetha)" <SivaSangeetha.SK@xxxxxxx>

Date: Fri, 24 Jun 2022 09:53:24 +0000

Accept-language: en-US

Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=amd.com; dmarc=pass action=none header.from=amd.com; dkim=pass header.d=amd.com; arc=none

Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=rgaotJCCp5p/3PaxmgtNsKh08W55nWfD9PprqDxcyEQ=; b=g1UFmJdu5FM+tGXCsH4NLt5RCIb5tgxi1iFJY+qEyIi3FXsNA1vQd6GC8XYIXRCiX/DteXSfp0Ky7sy+MAm0BxbrVTK5OF5DAOhXxamCQx5DNFzEkkRW1gJ9W3W4kv89CRF9N+MxcylOFgON8LNClXiZVIdsaKBR0j0reI0nLDSd7xvG+k9Q5uKawRi7M8VYIPx5EpGUAE99jaMmzRHZjrQ+W0BI/SfFAJw50ohGBfgMWRMRljEkwFZ98B11LiMZo2Jk2b7vwybJ8sVdocKDR3fDBj5wAkA70QQuFU0UrdqRvKEY+eYhfIeSjIZnFFwiwqpqEQO5Ru8XqK8ZAkJSQA==

Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Xh0IXUiTCG8FuyXz34mRRcOR6fHYO2iTXx+ZdadoVOtRMr3LpichwkRoGK8RFcwvALj7j+ly0X5p1rpDRICOTByN0IKXQCdaZgMCNd7jqttPnntbq+3ggbXe/ewxNNoBv5JLSzacZmQU4LbVGffwTU1nXib5jt49qE4BN2GdelYTpqDqad6g9+8J7+UdtzmUov2dAuw/dIM2SzME3SHFL4O1up3N1/1HR6e3iSho8ioAKSbOJSo9+A6AdYTIxbjIL/IzTxEfB2PD7wGdx2kpSHkqkg0krqx2+jV22dIqvjmuqvRQfADIw1n8Q+p5478A7zKImInPekWb3yEnk6bU8g==

Authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=amd.com;

Delivery-date: Fri, 24 Jun 2022 13:09:45 +0000

List-id: Xen user discussion <xen-users.lists.xenproject.org>

Msip_labels: MSIP_Label_4342314e-0df4-4b58-84bf-38bed6170a0f_Enabled=true; MSIP_Label_4342314e-0df4-4b58-84bf-38bed6170a0f_SetDate=2022-06-24T09:53:22Z; MSIP_Label_4342314e-0df4-4b58-84bf-38bed6170a0f_Method=Standard; MSIP_Label_4342314e-0df4-4b58-84bf-38bed6170a0f_Name=General; MSIP_Label_4342314e-0df4-4b58-84bf-38bed6170a0f_SiteId=3dd8961f-e488-4e60-8e11-a82d994e183d; MSIP_Label_4342314e-0df4-4b58-84bf-38bed6170a0f_ActionId=9f41e1b1-1268-4843-990b-4b745f693afd; MSIP_Label_4342314e-0df4-4b58-84bf-38bed6170a0f_ContentBits=1

Thread-index: AdiHr2So4ZRGcIepR0+LrE4BlT2RXA==

Thread-topic: Reg. Tee init fail...

[AMD Official Use Only - General]

Hi Xen team,

In TEE driver, We allocate a ring buffer, get its physical address from __pa() macro, pass the physical address to secure processor for mapping it and using in secure processor side.

Source: https://elixir.bootlin.com/linux/latest/source/drivers/crypto/ccp/tee-dev.c#L132

This works good natively in Dom0 on the target.

When we boot the same Dom0 kernel, with Xen hypervisor enabled, ring init fails.

We suspect that the address passed to secure processor, is not same when xen is enabled, and when xen is enabled, some level of address translation might be required to get exact physical address.

Any hints to resolve this?

Thanks,

Siva Sangeetha S K