System and method for execution of a secured environment initialization instruction
View Patent ↗A method and apparatus for initiating secure operations in a microprocessor system is described. In one embodiment, one initiating logical processor initiates the process by halting the execution of the other logical processors, and then loading initialization and secure virtual machine monitor software into memory. The initiating processor then loads the initialization software into secure memory for authentication and execution. The initialization software then authenticates and registers the secure virtual machine monitor software prior to secure system operations.
1. A processor, comprising:
logic to, in response to a secure environment initialization instruction, confirm that an other processor has entered a wait state and copy secure initialization software into a secure memory after confirming that the other processor has entered the wait state, and
begin execution of the secure initialization software in the secure memory.
2. The processor of claim 1 , wherein the logic is to copy the secure initialization software into the secure memory for validation.
3. The processor of claim 1 , wherein the logic is to begin execution of the secure initialization software by transferring control to the secure initialization software.
4. The processor of claim 1 , wherein the logic is also to provide a location at which the other processor is to begin execution in the secure environment.
5. A method comprising:
executing, by a first processor, a secure environment initialization instruction, including confirming that a second processor has entered a wait state and copying secure initialization software into a secure memory after confirming that the second processor has entered the wait state, and
executing, by the first processor, the secure initialization software in the secure memory in response to the secure environment initialization instruction.
6. The method of claim 5 , further comprising validating the secure initialization software in the secure memory in response to the secure environment initialization instruction.
7. The method of claim 6 , wherein validating the secure initialization software in the secure memory in response to the secure environment initialization instruction includes using a digital signature of the secure initialization software.
8. The method of claim 7 , wherein the digital signature of the secure initialization software is produced by a hash of the secure initialization software.
9. The method of claim 8 , wherein the digital signature of the secure initialization software is produced by a hash of the secure initialization software.
10. The method of claim 5 , further comprising executing, after execution of the secure initialization software, a secure virtual machine monitor.
11. The method of claim 5 , further comprising providing a location at which the second processor is to begin execution in the secure environment.
12. A system comprising:
a first processor to, in response to a secure environment initialization instruction, copy secure initialization software into a secure memory, and begin execution of the secure initialization software in the secure memory; and
a second processor to begin execution in the secure environment at a location provided by the first processor after validation of the secure initialization software in the secure memory;
wherein the first processor is also to confirm that the second processor has entered a wait state before copying the secure initialization software into the secure memory.
13. The system of claim 12 , further comprising a secure virtual machine monitor to be executed after execution of the secure initialization software.
14. A non-transitory machine-readable medium storing a secure environment initialization instruction that, when executed by a processor, causes the processor to:
confirm that an other processor has entered a wait state and copy secure initialization software into a secure memory after confirming that the other processor has entered the wait state, and
begin execution of the secure initialization software in the secure memory.