Rate This Document
Findability
Accuracy
Completeness
Readability

Environment Requirements

Before enabling the TEE Kit, prepare the hardware and software environments to facilitate subsequent installation operations.

Firmware Requirements

Table 1 Obtaining the firmware

Firmware Name

Version

Description

How to Obtain

BIOS

21.23 or later

Server BIOS firmware, which supports TMM firmware boot.

Enterprise website

BMC

5.05.12.5 or later

Server BMC firmware, which supports secure TMM firmware boot.

Enterprise website

Obtaining Software Packages

Table 2 Obtaining software packages

Software Package

Version

Description

How to Obtain

BoostKit-virtCCA_1.6.0.zip

1.6.0

Kunpeng BoostKit for Confidential Computing TEE Kit software package, including the TMM firmware.

Contact Huawei technical support.

libvirt

9.10.0-16 or later

VM management interface library.

Downloading openEuler 24.03 LTS SP2 using yum

QEMU

8.2.0-37 or later

Open source VM software, which can simulate different hardware platforms and OSs.

Downloading openEuler 24.03 LTS SP2 using yum

Kernel

6.6.0-98.0.0.103 or later

Linux kernel.

Downloading openEuler 24.03 LTS SP2 using yum

virtCCA_driver

0.1.11-1

Virtualized Arm Confidential Compute Architecture (virtCCA) driver software package, including drivers related to the sealing key and secure memory observability.

Downloading openEuler 24.03 LTS SP2 using yum

virtCCA_sdk

0.1.17-1 or later

virtCCA SDK software package, which provides the dynamic library and header file for virtCCA remote attestation.

Downloading openEuler 24.03 LTS SP2 using yum

QCBOR

1.2

Efficient and lightweight Concise Binary Object Representation (CBOR) encoding and decoding library.

Link

t_cose

1.1.2

Lightweight software library designed for embedded systems and resource-limited devices. It implements the CBOR Object Signing and Encryption (COSE) protocol (specified in RFC 8152) and provides efficient CBOR data signature and verification functions.

Link

rats-tls

commit:

40f7b78403d75d13b1a372c769b2600f62b02692

Bidirectional Transport Layer Security (TLS) library that supports trusted execution environments (TEEs) across heterogeneous hardware.

Link

Verifying Software Package Integrity

After downloading a software package from the Kunpeng community, verify the software package to ensure that it is consistent with the original one on the website.

  1. Obtain the digital certificate and installation package. For details, see Table 2.
  2. Obtain the verification tool and guide from the Huawei enterprise website.
  3. Verify the package integrity by following the procedure described in the OpenPGP Signature Verification Guide obtained from 2.