Change Description

Containerized deployment of TAs and high-level language applications the confidential OS

The confidential OS allows deploying TAs to containers in the REE, so that trusted applications can be deployed to containers in the TEE.

Upgrading the confidential OS on the motherboard with 16 MB flash memory

The confidential OS components can be upgraded on Kunpeng servers where TrustZone has been deployed on the live network. The supported models include servers powered by the Kunpeng S920S00, S920X00, S920X02, or S920S03 motherboard.

Resizable tzdriver mailbox

When compiling tzdriver, you can configure the mailbox size to adapt tzdriver to OSs with different page sizes.

TEE status detection tool

The TEE status detection tool can check the TrustZone kit deployment on Kunpeng servers and query the TEE status.