How to install Intel TDX module (TDX_1.5.05.46.698 UPLR1) to Ubuntu

Question

How to install Intel TDX module (TDX_1.5.05.46.698 UPLR1) to Ubuntu

ggr432 opened this issue 3 months ago · comments

I obtained TDX_1.5.05.46.698 UPLR1 data from Intel, which contains the following file contents. Can anyone tell me how to install it to Ubuntu 23.10? Thank a lot.

TDX_1.5.05.46_PRODUCTION_SIGN.so
TDX_1.5.05.46_PRODUCTION_SIGN.so.sigstruct
TDX_1.5.05.46_PRODUCTION_SIGN.sig
TDX_1.5.05.46_PRODUCTION_SIGN.spdx
SEAM_1.5.02.00_SEAMLDR_PW_signed.bin
SEAM_1.5.02.00_SEAMLDR_PROD_SIGN.sig
SEAM_1.5.02.00_SEAMLDR_PROD_SIGN.spdx

Hector Cao · Answer 1 · Fri May 03 2024 23:24:33 GMT+0800 (China Standard Time)

mkdir -p /boot/efi/EFI/TDX/
cp SEAM_1.5.02.00_SEAMLDR_PW_signed.bin /boot/efi/EFI/TDX/TDX-SEAM_SEAMLDR.bin 
cp TDX_1.5.05.46_PRODUCTION_SIGN.so /boot/efi/EFI/TDX/TDX-SEAM.so 
cp TDX_1.5.05.46_PRODUCTION_SIGN.so.sigstruct /boot/efi/EFI/TDX/TDX-SEAM.so.sigstruct

ggr432 · Answer 2 · Sat May 04 2024 08:19:29 GMT+0800 (China Standard Time)

@hector-cao Thank you very much, I will try it.

fu-ju · Answer 3 · Wed Jul 24 2024 10:10:06 GMT+0800 (China Standard Time)

Can I compile and sign the firmware based on the open source TDX code? @hector-cao

syncronize-issues-to-jira · Answer 4 · Wed Jul 24 2024 10:10:15 GMT+0800 (China Standard Time)

Thank you for reporting us your feedback!

The internal ticket has been created: https://warthogs.atlassian.net/browse/PEK-895.

This message was autogenerated

Hector Cao · Answer 5 · Wed Jul 24 2024 10:27:33 GMT+0800 (China Standard Time)

@fu-ju No it is not possible; the firmware must be signed by Intel

fu-ju · Answer 6 · Wed Jul 24 2024 10:32:34 GMT+0800 (China Standard Time)

@hector-cao Thank you very much！

Roshan · Answer 7 · Wed Aug 07 2024 13:05:04 GMT+0800 (China Standard Time)

@ggr432 Any tips on how to acquire the TDX module from Intel?