Re: [PATCH v5 04/10] PCI/TSM: Authenticate devices via platform TSM

[Alexey Kardashevskiy <aik@amd.com>]

On 6/9/25 12:07, dan.j.williams@intel.com wrote:
> Alexey Kardashevskiy wrote:
> [..]
>>> TDISP without IDE still needs to do all of SPDM (Component Measurement and
>>> Authentication),
>>
>> Support for PCI_DOE_FEATURE_CMA_SPDM says that then.
> 
> Right, the TSM core looks for that (PCI_DOE_PROTO_CMA) as part of
> connect because it needs that either for TDISP or IDE.

The quoted bit looks for PCI_EXP_DEVCAP_TEE.

>>> and the TDISP state machine.
>>
>> I'd think PCI_EXP_DEVCAP_TEE is set on something which allows
>> START_INTERFACE_REQUEST and some SRIOV devices may not want to allow
>> this on PF0. I am likely to be wrong here then. Hm.
> 
> PCI_EXP_DEVCAP_TEE is the only way to identify TDISP capable devices in
> the guest, right?

Right.

> So PCI_EXP_DEVCAP_TEE means that there may be a DSM,

This bit I am not sure about. A bit hard to believe that PF0 is always expected to support passing through to a CVM. Thanks,

> or a guest-side TSM tunnel to a DSM, that can affect the TDISP state of
> this function.


-- 
Alexey