Re: [PATCH 4/4] kvm: svm: Support KVM_SEV_SNP_PAGE_TYPE_VMSA at SNP_LAUNCH_UPDATE

Hi James,

On Wed, Jun 17, 2026 at 09:18:14AM -0400, James Bottomley wrote:
> That's true for the launch measure, but you do have a vTPM inside the
> SVSM which you could use to measure an updated GHCB if we could decide
> on a PCR to use (and a logging specification).

I guess you mean an updated VMSA? The guest-created VMSAs are trusted because
they are created by trusted code from within the TEE. There is no need to
runtime-measure their content, no?


-Joerg