System and method for execution of a secured environment initialization instruction
View Patent ↗A method and apparatus for initiating secure operations in a microprocessor system is described. In one embodiment, one initiating logical processor initiates the process by halting the execution of the other logical processors, and then loading initialization and secure virtual machine monitor software into memory. The initiating processor then loads the initialization software into secure memory for authentication and execution. The initialization software then authenticates and registers the secure virtual machine monitor software prior to secure system operations.
1. A processor comprising:
a trusted memory of the processor to support secure initialization operations;
secure initialization logic of the processor to establish a root of trust for a secure execution environment;
execution logic of the processor to execute secure initialization program code within the secure execution environment, at least a portion of the secure initialization program code to be copied into the trusted memory;
the execution logic to validate the secure initialization program code prior to execution; and
the execution logic to validate a virtual machine monitor (VMM) and copy the VMM to a trusted system memory area within the secure execution environment.
2. The processor as in claim 1 wherein validation of the VMM by the execution unit is to include cryptographic authentication of the VMM.
3. A processor comprising:
a trusted memory of the processor to support secure initialization operations;
execution logic of the processor, the execution logic including secure initialization logic to establish a root of trust for a secure execution environment;
the execution logic to execute secure initialization program code within the secure execution environment, at least a portion of the secure initialization program code to be copied into the trusted memory;
the execution logic to validate the secure initialization program code prior to execution; and
the execution logic to validate a virtual machine monitor (VMM) and copy the VMM to a trusted system memory area within the secure execution environment.
4. The processor as in claim 3 wherein validation of the VMM by the execution unit is to include cryptographic authentication of the VMM.