Yes, thank you. I have done that and am looking at "Secure Encrypted Virtualization API Version 0.16" It describes commands, for instance INIT "used by the platform owner to initialize the platform", which makes me think I should have control over this process of creating keys. I have no idea how to make that happen.
Any hints?
Glenn