Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-46216

Server 2025/Win11 to function with VBS enabled and IOMMU (DeviceGuard)

XMLWordPrintable

    • Icon: Epic Epic
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • None
    • rhel-9.5
    • kernel / Virtualization / KVM
    • None
    • Server 2025 need to be certified with VBS enabled and IOMMU (DeviceGuard)
    • Hide

      Priority 1. Identify hosts where the Server 2025 with VBS and IOMMU is able to work

      Priority 2. Solve the problem at least for some of child issues for various CPUs

      Show
      Priority 1. Identify hosts where the Server 2025 with VBS and IOMMU is able to work Priority 2. Solve the problem at least for some of child issues for various CPUs
    • rhel-sst-virtualization-hwe
    • ssg_virtualization
    • False
    • Hide

      None

      Show
      None

      Description

      In order to pass SVVP certification of Server 2025 we need to make the system to be functional with VBS enabled and IOMMU enabled (DeviceGuard compatibility)

      [VBS - virtualization based security]

      Unfortunately on several tried hosts the Server 2025 is not able to boot when VBS is enabled on the guest and IOMMU is enabled

      This issue is just common point to the entire problem, please open separate issue for each new CPU model when needed and place a link here. In the CPU-specific issues please attach /proc/cpuinfo, exact command line, machine name (for further investigation)

      For CPU(s) where VBS with IOMMU works please make a comment with reference exact command, /proc/cpuinfo and machine name. 

       

      What SSTs and Layered Product teams should review this?

              yvugenfi@redhat.com Yan Vugenfirer
              yuri.benditovich Yuri Benditovich
              virt-maint virt-maint
              Xiaoling Gao Xiaoling Gao
              Votes:
              0 Vote for this issue
              Watchers:
              11 Start watching this issue

                Created:
                Updated: