1 What: /sys/bus/auxiliary/devices/intel_vsec.sdsi.X
4 Contact: "David E. Box" <david.e.box@linux.intel.com>
6 This directory contains interface files for accessing Intel
7 Software Defined Silicon (SDSi) features on a CPU. X
8 represents the socket instance (though not the socket ID).
9 The socket ID is determined by reading the registers file
10 and decoding it per the specification.
12 Some files communicate with SDSi hardware through a mailbox.
13 Should the operation fail, one of the following error codes
18 EIO General mailbox failure. Log may indicate cause.
19 EBUSY Mailbox is owned by another agent.
20 EPERM SDSI capability is not enabled in hardware.
21 EPROTO Failure in mailbox protocol detected by driver.
23 EOVERFLOW For provision commands, the size of the data
24 exceeds what may be written.
25 ESPIPE Seeking is not allowed.
26 ETIMEDOUT Failure to complete mailbox transaction in time.
28 What: /sys/bus/auxiliary/devices/intel_vsec.sdsi.X/guid
31 Contact: "David E. Box" <david.e.box@linux.intel.com>
33 (RO) The GUID for the registers file. The GUID identifies
34 the layout of the registers file in this directory.
35 Information about the register layouts for a particular GUID
36 is available at http://github.com/intel/intel-sdsi
38 What: /sys/bus/auxiliary/devices/intel_vsec.sdsi.X/registers
41 Contact: "David E. Box" <david.e.box@linux.intel.com>
43 (RO) Contains information needed by applications to provision
44 a CPU and monitor status information. The layout of this file
45 is determined by the GUID in this directory. Information about
46 the layout for a particular GUID is available at
47 http://github.com/intel/intel-sdsi
49 What: /sys/bus/auxiliary/devices/intel_vsec.sdsi.X/provision_akc
52 Contact: "David E. Box" <david.e.box@linux.intel.com>
54 (WO) Used to write an Authentication Key Certificate (AKC) to
55 the SDSi NVRAM for the CPU. The AKC is used to authenticate a
56 Capability Activation Payload. Mailbox command.
58 What: /sys/bus/auxiliary/devices/intel_vsec.sdsi.X/provision_cap
61 Contact: "David E. Box" <david.e.box@linux.intel.com>
63 (WO) Used to write a Capability Activation Payload (CAP) to the
64 SDSi NVRAM for the CPU. CAPs are used to activate a given CPU
65 feature. A CAP is validated by SDSi hardware using a previously
66 provisioned AKC file. Upon successful authentication, the CPU
67 configuration is updated. A cold reboot is required to fully
68 activate the feature. Mailbox command.
70 What: /sys/bus/auxiliary/devices/intel_vsec.sdsi.X/state_certificate
73 Contact: "David E. Box" <david.e.box@linux.intel.com>
75 (RO) Used to read back the current State Certificate for the CPU
76 from SDSi hardware. The State Certificate contains information
77 about the current licenses on the CPU. Mailbox command.