Rate This Document
Findability
Accuracy
Completeness
Readability

Environment Requirements

Table 1 Obtaining the server firmware

Software Package

Software Version

Description

How to Obtain

BoostKit-virtCCA_1.5.0.zip

1.5.0

Kunpeng BoostKit for Confidential Computing TEE Kit software package, including the TMM firmware.

Please contact Huawei technical support for assistance.

BIOS

20.47 or later

Server BIOS firmware, which supports TMM firmware boot.

Enterprise website

BMC

5.05.12.5 or later

Server BMC firmware, which supports secure TMM firmware boot.

Enterprise website

Verifying the Software Package Integrity

After downloading a software package from the Kunpeng community, verify the software package to ensure that it is consistent with the original one on the website.

Verify the software package as follows:

  1. Obtain the digital certificate and installation package. For details, see Table 1.
  2. Obtain the verification tool and guide from the Huawei enterprise website.
  3. Verify the package integrity by following the procedure described in the OpenPGP Signature Verification Guide obtained from 2.
Table 2 Obtaining software packages

Software Package

Software Version

Description

How to Obtain

libvirt

9.10.0-16 or later

VM management interface library.

Downloading openEuler 24.03 LTS SP2 using yum

QEMU

8.2.0-37 or later

Open source VM software, which can simulate different hardware platforms and OSs.

Downloading openEuler 24.03 LTS SP2 using yum

Kernel

6.6.0-98.0.0.103 or later

Linux kernel.

Downloading openEuler 24.03 LTS SP2 using yum

virtCCA_driver

0.1.11-1

Virtualized Arm Confidential Compute Architecture (virtCCA) driver software package, including drivers related to key sealing and secure memory observability.

Downloading openEuler 24.03 LTS SP2 using yum

virtCCA_sdk

0.1.17-1 or later

virtCCA SDK software package, which provides the dynamic library and header file for virtCCA remote attestation.

Downloading openEuler 24.03 LTS SP2 using yum

QCBOR

1.2

Efficient and lightweight Concise Binary Object Representation (CBOR) encoding and decoding library.

Link

t_cose

1.1.2

Lightweight software library designed for embedded systems and resource-limited devices. It implements the CBOR Object Signing and Encryption (COSE) protocol (specified in RFC 8152) and provides efficient CBOR data signature and verification functions.

Link

rats-tls

commit:

40f7b78403d75d13b1a372c769b2600f62b02692

Bidirectional Transport Layer Security (TLS) library that supports trusted execution environments (TEEs) across heterogeneous hardware.

Link