Skip to content

Commit 42960dd

Browse files
deb-inteldbkinder
authored andcommitted
Adjust picture size for SGX
Signed-off-by: Deb Taylor <deb.taylor@intel.com>
1 parent d0f7563 commit 42960dd

File tree

1 file changed

+12
-7
lines changed

1 file changed

+12
-7
lines changed

doc/tutorials/sgx_ virtualization.rst

Lines changed: 12 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ ACRN SGX virtualization support can be divided into three parts:
1919
The image below shows the high-level design of SGX virtualization in ACRN.
2020

2121
.. figure:: images/sgx-1.png
22-
:scale: 50%
22+
:scale: 25%
2323
:align: left
2424

2525
Figure 1: SGX Virtualization in ACRN
@@ -67,26 +67,30 @@ you must perform the following:
6767
a) Go to the Security page:
6868

6969
.. figure:: images/sgx-2.jpg
70+
:scale: 25%
7071
:align: left
7172

7273
#) Enable SGX and configure the SGX Reserved Memory size as below:
74+
7375
* Intel Software Guard Extension (SGX) -> Enabled
7476
* SGX Reserved Memory Size -> 128MB
7577

7678
.. figure:: images/sgx-3.jpg
79+
:scale: 25%
7780
:align: left
7881

7982
.. note::
8083
Not all SGX Reserved Memory can be used as EPC. On KBL-NUC-i7,
8184
the SGX EPC size is 0x5d80000 (93.5MB) when the SGX Reserved Memory Size is set to 128MB.
8285

83-
#. Add the EPC config in the VM configuration:
84-
Apply the patch to enable SGX support in UOS in the SDC scenario:
85-
https://github.com/binbinwu1/acrn-hypervisor/commit/0153b2b9b9920b61780163f19c6f5318562215ef.patch
86+
#. Add the EPC config in the VM configuration:
87+
Apply the patch to enable SGX support in UOS in the SDC scenario:
88+
https://github.com/binbinwu1/acrn-hypervisor/commit/0153b2b9b9920b61780163f19c6f5318562215ef.patch
89+
90+
#. Enable SGX in Guest:
8691

87-
#. Enable SGX in Guest:
88-
* Refer to https://github.com/intel/linux-sgx on how to enable SGX in Linux Guest.
89-
* Refer to https://software.intel.com/en-us/articles/getting-started-with-sgx-sdk-for-windows on how to enable SGX in Windows Guest.
92+
* Refer to https://github.com/intel/linux-sgx on how to enable SGX in Linux Guest.
93+
* Refer to https://software.intel.com/en-us/articles/getting-started-with-sgx-sdk-for-windows on how to enable SGX in Windows Guest.
9094

9195
SGX Capability Exposure
9296
***********************
@@ -158,6 +162,7 @@ Enclave System Function Handling
158162
********************************
159163

160164
A new "Enable ENCLS exiting" control bit (bit 15) is defined in the secondary processor-based VM execution control.
165+
161166
* 1-Setting of "Enable ENCLS exiting" enables ENCLS-exiting bitmap control, which is a new 64-bit ENCLS-exiting bitmap control field added to VMX VMCS (0202EH) to control VMEXIT on ENCLS leaf functions.
162167
* ACRN does not emulate ENCLS leaf functions and will not enable ENCLS exiting.
163168

0 commit comments

Comments
 (0)