canonical / tdx

Intel confidential computing - TDX
GNU General Public License v3.0
80 stars 31 forks source link

SEAMCALL failed when the host initial the intel tdx module #161

Closed bronzeMe closed 1 month ago

bronzeMe commented 1 month ago
sudo rdmsr 0x1401 -f 11:11
1
test@test:~$ cat /etc/os-release
PRETTY_NAME="Ubuntu 24.04 LTS"
NAME="Ubuntu"
VERSION_ID="24.04"
VERSION="24.04 LTS (Noble Numbat)"
VERSION_CODENAME=noble
ID=ubuntu
ID_LIKE=debian
HOME_URL="https://www.ubuntu.com/"
SUPPORT_URL="https://help.ubuntu.com/"
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"
UBUNTU_CODENAME=noble
LOGO=ubuntu-logo
test@test:~$ uname -a
Linux test 6.8.0-1006-intel #13-Ubuntu SMP PREEMPT_DYNAMIC Mon Jun 17 14:26:59 UTC 2024 x86_64 x86_64 x86_64 GNU/Linux
test@test:~$ sudo dmesg|grep -i tdx
[    0.000000] Command line: BOOT_IMAGE=/vmlinuz-6.8.0-1006-intel root=UUID=f75ae682-553d-4804-a991-1c046529b132 ro kvm_intel.tdx=1 nohibernate
[    4.659364] Kernel command line: BOOT_IMAGE=/vmlinuz-6.8.0-1006-intel root=UUID=f75ae682-553d-4804-a991-1c046529b132 ro kvm_intel.tdx=1 nohibernate
[    8.972357] virt/tdx: BIOS enabled: private KeyID range [32, 64)
[    8.972360] virt/tdx: Disable ACPI S3. Turn off TDX in the BIOS to use ACPI S3.
[   19.324236] virt/tdx: SEAMCALL (0x0000000000000021) failed: 0xc000090000000000
syncronize-issues-to-jira[bot] commented 1 month ago

Thank you for reporting us your feedback!

The internal ticket has been created: https://warthogs.atlassian.net/browse/PEK-846.

This message was autogenerated

hector-cao commented 1 month ago

@bronzeMe Hello; typically this is because you have an old version of the BIOS, please reach out to your OEM to update the BIOS

qzheng527 commented 1 month ago

@hector-cao Similar error here on Intel(R) Xeon(R) Platinum 8469C. image

Is there any other way to address this issue?

hector-cao commented 1 month ago

@qzheng527 Hello as i mentioned, you will have to update the BIOS, the build_num 456 is too old;

qzheng527 commented 1 month ago

@qzheng527 Hello as i mentioned, you will have to update the BIOS, the build_num 456 is too old;

Yes,it works after updating the TDX-SEAM.

hector-cao commented 1 month ago

@qzheng527 Thanks, closing