On 04/06/20 23:54, Thiago Jung Bauermann wrote: > QEMU could always create a PEF object, and if the command line defines > one, it will correspond to it. And if the command line doesn't define one, > then it would also work because the PEF object is already there. How would you start a non-protected VM? Currently it's the "-machine" property that decides that, and the argument requires an id corresponding to "-object". Paolo > That way, compatibility with AMD SEV is preserved but we also get > command line simplicity where it is not needed.