From mboxrd@z Thu Jan 1 00:00:00 1970 From: Vadim Rozenfeld Subject: Re: KVM, Entropy and Windows Date: Thu, 17 Feb 2011 12:09:04 +0200 Message-ID: <1297937344.2435.12.camel@localhost> References: <004882f9-9a99-4312-a7c5-c307398cd297@office.splatnix.net> <4D5CE63B.9030906@redhat.com> Mime-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 7bit Cc: "--[ UxBoD ]--" , kvm@vger.kernel.org To: Avi Kivity Return-path: Received: from mx1.redhat.com ([209.132.183.28]:65460 "EHLO mx1.redhat.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1755173Ab1BQKJK (ORCPT ); Thu, 17 Feb 2011 05:09:10 -0500 In-Reply-To: <4D5CE63B.9030906@redhat.com> Sender: kvm-owner@vger.kernel.org List-ID: On Thu, 2011-02-17 at 11:11 +0200, Avi Kivity wrote: > On 02/16/2011 09:54 PM, --[ UxBoD ]-- wrote: > > Hello all, > > > > I believe I am hitting a problem on one of our Windows 2003 KVM guests were I believe it is running out of Entropy and causing SSL issues. > > > > I see that there is a module called virtio-rng which I believe passes the HW entropy source through to the guest but does this work on Windows as-well ? > > > > AFAIK there is no Windows driver for virtio-rng. Seems like a good > idea. Vadim? virtio-rng driver for windows is not a big deal. IMO, the real problem will be to force Windows to use for CriptoApi. > > > If it doesn't any ideas on how I can increase the amount of entropy being generated on a headless system ? or even monitor entropy on a Windows system ? > > No idea. Maybe you could ask Windows to collect entropy from packet > timings. >