Hi Jacobo, On 11/17/2024 11:42, Jacobo Pantoja wrote:
Hi Mario / crypto mailing list: I'm trying to pass-through my AMD 5600G's integrated CPU; I can do it easily with Linux guest, but I'm being unable to do so with a Windows 11 guest (which is my end goal)
What do you mean "pass through the CPU"? What exactly is "working" with Linux guests and what exactly is "failing" with Windows ones?
Is this related to passing through the graphics PCI device from the APU and having problems with that perhaps?
I've noted in my dmesg the following line: "ccp: unable to access the device: you might be running a broken BIOS"
Are you trying to pass through the PCI device for the PSP to a guest? What is your goal with it?
Tracing it a bit on the internet, I found a couple of fwupd commits done by you stating that in some platforms this is expected (e.g. 0x1649) [1] Comparing, in my motherboard I see that the Platform Security Processor is 1022:15DF, being that last number in the same code you applied the patch... but I cannot understand whether the ccp message is expected on this platform (chipset is B450, if it adds info) or not; and if this could be related to the pass-through problems. Any hints would be more than welcome
Those messages are referring to some cryptographic acceleration IP offered by the PSP on some SoCs.
Not all BIOSes all access to it and it really is a case by case basis if it's expected behavior or not. When it's not accessible that "just" means that you can't use that acceleration feature. There are other features the PCI PSP driver exports such as TEE, security attributes, dynamic boost control, SEV etc. Not all platforms support all features.
If you're just shooting in the dark for your issue based on the warning about the BIOS not offering CCP this is probably the wrong tree to bark up. If it's actually related it would be good at least for me to understand what that message has to do with a Windows guest.
