Secure Memory Configuration

The TEE Kit may involve memory-intensive cVMs or multiple cVMs in customers' application scenarios. It requires a much larger secure memory space than traditional TrustZone applications (for example 512 GB). The BIOS matching the TEE Kit provides the following configuration options of secure memory:

1. Auto mode: The BIOS allocates the maximum secure memory space to cVMs based on the TrustZone chip capability.
2. Menu mode: If customers only need a small amount of secure memory to deploy cVMs, they can choose the menu mode and select the desired secure memory size within the range of 4 GB to 512 GB.

For details about how to configure secure memory, see "Enabling the TEE in the BIOS" in Confidential Computing TEE Kit Feature Guide.