Hello everyone,
I have a Lenovo ThinkSystem SR645 7D2X with an AMD EPYC 7313P 16-Core processor and Ubnutu Server 20.04 and kernel 6.3.1-060301-generic. How can I enable SEV-ES? I have changed the parameters in UEFI:
- SMEE = [Enabled]
- SEV ASID Count = [AUTO]
- SEV-ES ASID Space Limit Control = [Manual]
- SEV-ES ASID Space Limit = [1]
I have tried to set the kvm_amd.sev_es to 1 in grub ("mem_encrypt=on kvm_amd.sev_es=1") but it does not work. After reboot, when I read the kvm_amd parameter sev_es I get "N", it says it is not turned on in kvm.
Kind regards,
Danko
