When I compile the OVMF packages with "-D SECURE_BOOT_ENABLE=TRUE -D DEBUG_ON_SERIAL_PORT=TRUE", I found the OVMF can not work properly.<br /><br /><strong>First, I boot a Qemu VM with only OVMF_CODE.fd but not OVMF_VARS.fd:</strong><br /><br />&nbsp; &nbsp; a. For Non-encrypted VM, the guest hungs in OVMF with the following assert message.<br /><br />&nbsp; &nbsp; &nbsp; &nbsp; ----------------------------------------------<br />&nbsp; &nbsp; &nbsp; &nbsp; Reserved variable store memory: 0xBFD7C000; size: 528kb<br />&nbsp; &nbsp; &nbsp; &nbsp; NvVarStore FV headers were invalid.<br />&nbsp; &nbsp; &nbsp; &nbsp; ASSERT [PlatformPei] /dev/shm/edk2/OvmfPkg/Library/PlatformInitLib/Platform.c(932): ((BOOLEAN)(0==1))<br />&nbsp; &nbsp; &nbsp; &nbsp; ----------------------------------------------<br /><br />&nbsp; &nbsp; b. For SEV VM, the guest reset in the OVMF in an infinite loop.<br /><br />&nbsp; &nbsp; &nbsp; &nbsp; ----------------------------------------------<br />&nbsp; &nbsp; &nbsp; &nbsp; SecCoreStartupWithStack(0xFFFCC000, 0x820000)<br />&nbsp; &nbsp; &nbsp; &nbsp; Register PPI Notify: DCD0BE23-9586-40F4-B643-06522CED4EDE<br />&nbsp; &nbsp; &nbsp; &nbsp; ......<br />&nbsp; &nbsp; &nbsp; &nbsp; Reserved variable store memory: 0xBFD7C000; size: 528kb<br />&nbsp; &nbsp; &nbsp; &nbsp; SecCoreStartupWithStack(0xFFFCC000, 0x820000)<br />&nbsp; &nbsp; &nbsp; &nbsp; Register PPI Notify: DCD0BE23-9586-40F4-B643-06522CED4EDE<br />&nbsp; &nbsp; &nbsp; &nbsp; ......<br />&nbsp; &nbsp; &nbsp; &nbsp; Reserved variable store memory: 0xBFD7C000; size: 528kb<br />&nbsp; &nbsp; &nbsp; &nbsp; SecCoreStartupWithStack(0xFFFCC000, 0x820000)<br />&nbsp; &nbsp; &nbsp; &nbsp; Register PPI Notify: DCD0BE23-9586-40F4-B643-06522CED4EDE<br />&nbsp; &nbsp; &nbsp; &nbsp; ......<br />&nbsp; &nbsp; &nbsp; &nbsp; Reserved variable store memory: 0xBFD7C000; size: 528kb<br />&nbsp; &nbsp; &nbsp; &nbsp; SecCoreStartupWithStack(0xFFFCC000, 0x820000)<br />&nbsp; &nbsp; &nbsp; &nbsp; ......<br />&nbsp; &nbsp; &nbsp; &nbsp; ......<br />&nbsp; &nbsp; &nbsp; &nbsp; ----------------------------------------------<br /><br />&nbsp; &nbsp; c. For SEV-ES VM, the guest hungs in OVMF with the following assert message.<br /><br />&nbsp; &nbsp; &nbsp; &nbsp; ----------------------------------------------<br />&nbsp; &nbsp; &nbsp; &nbsp; Reserved variable store memory: 0xBFD7C000; size: 528kb<br />&nbsp; &nbsp; &nbsp; &nbsp; Invalid MMIO opcode (AF)<br />&nbsp; &nbsp; &nbsp; &nbsp; ASSERT [SecMain] /dev/shm/edk2/OvmfPkg/Library/CcExitLib/CcExitVcHandler.c(507): ((BOOLEAN)(0==1))<br />&nbsp; &nbsp; &nbsp; &nbsp; ----------------------------------------------<br /><br /><strong>Then, I boot a Qemu VM with OVMF.fd (the OVMF_VARS.fd part is included in OVMF.fd):</strong><br /><br />&nbsp; &nbsp; a. For SEV/SEV-ES VM, the guest hungs in OVMF with following dump messages.&nbsp;<br /><br />&nbsp; &nbsp; &nbsp; &nbsp; ----------------------------------------------<br />&nbsp; &nbsp; &nbsp; &nbsp; Loading driver at 0x000BDB92000 EntryPoint=0x000BDB95EF4 FaultTolerantWriteDxe.efi<br />&nbsp; &nbsp; &nbsp; &nbsp; InstallProtocolInterface: BC62157E-3E33-4FEC-9920-2D3B36D750DF BDE01D98<br />&nbsp; &nbsp; &nbsp; &nbsp; ProtectUefiImageCommon - 0xBDE01040<br />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; - 0x00000000BDB92000 - 0x0000000000005B00<br />&nbsp; &nbsp; &nbsp; &nbsp; Ftw: FtwWorkSpaceLba - 0x40, WorkBlockSize &nbsp;- 0x1000, FtwWorkSpaceBase - 0x0<br />&nbsp; &nbsp; &nbsp; &nbsp; Ftw: FtwSpareLba &nbsp; &nbsp; - 0x42, SpareBlockSize - 0x1000<br />&nbsp; &nbsp; &nbsp; &nbsp; Ftw: NumberOfWorkBlock - 0x1, FtwWorkBlockLba - 0x40<br />&nbsp; &nbsp; &nbsp; &nbsp; Ftw: WorkSpaceLbaInSpare - 0x0, WorkSpaceBaseInSpare - 0x0<br />&nbsp; &nbsp; &nbsp; &nbsp; Ftw: Remaining work space size - FE0<br />&nbsp; &nbsp; &nbsp; &nbsp; !!!! X64 Exception Type - 0D(#GP - General Protection) &nbsp;CPU Apic ID - 00000000 !!!!<br />&nbsp; &nbsp; &nbsp; &nbsp; ExceptionData - 0000000000000000<br />&nbsp; &nbsp; &nbsp; &nbsp; RIP &nbsp;- 00000000BDB92459, CS &nbsp;- 0000000000000038, RFLAGS - 0000000000010286<br />&nbsp; &nbsp; &nbsp; &nbsp; RAX &nbsp;- 587E3201A019FB0C, RCX - 587E3200E238F994, RDX - 0000000000000001<br />&nbsp; &nbsp; &nbsp; &nbsp; RBX &nbsp;- 00000000BDE10018, RSP - 00000000BFB79AD8, RBP - 0000000000000FE0<br />&nbsp; &nbsp; &nbsp; &nbsp; RSI &nbsp;- 00000000BDE100A8, RDI - 00000000BDE10128<br />&nbsp; &nbsp; &nbsp; &nbsp; R8 &nbsp; - D4642A9DFB7C79BE, R9 &nbsp;- 00000000000003F8, R10 - 00000000BDB96602<br />&nbsp; &nbsp; &nbsp; &nbsp; R11 &nbsp;- 0000000000000002, R12 - 00000000BDE100A0, R13 - 0000000000000000<br />&nbsp; &nbsp; &nbsp; &nbsp; R14 &nbsp;- 0000000000000001, R15 - 00000000BFBA76C0<br />&nbsp; &nbsp; &nbsp; &nbsp; DS &nbsp; - 0000000000000030, ES &nbsp;- 0000000000000030, FS &nbsp;- 0000000000000030<br />&nbsp; &nbsp; &nbsp; &nbsp; GS &nbsp; - 0000000000000030, SS &nbsp;- 0000000000000030<br />&nbsp; &nbsp; &nbsp; &nbsp; CR0 &nbsp;- 0000000080010033, CR2 - 0000000000000000, CR3 - 00000000BF801000<br />&nbsp; &nbsp; &nbsp; &nbsp; CR4 &nbsp;- 0000000000000668, CR8 - 0000000000000000<br />&nbsp; &nbsp; &nbsp; &nbsp; DR0 &nbsp;- 0000000000000000, DR1 - 0000000000000000, DR2 - 0000000000000000<br />&nbsp; &nbsp; &nbsp; &nbsp; DR3 &nbsp;- 0000000000000000, DR6 - 00000000FFFF0FF0, DR7 - 0000000000000400<br />&nbsp; &nbsp; &nbsp; &nbsp; GDTR - 00000000BF5DC000 0000000000000047, LDTR - 0000000000000000<br />&nbsp; &nbsp; &nbsp; &nbsp; IDTR - 00000000BEF0C018 0000000000000FFF, &nbsp; TR - 0000000000000000<br />&nbsp; &nbsp; &nbsp; &nbsp; FXSAVE_STATE - 00000000BFB79730<br />&nbsp; &nbsp; &nbsp; &nbsp; !!!! Find image based on IP(0xBDB92459) /dev/shm/edk2/Build/OvmfX64/DEBUG_GCC5/X64/MdeModulePkg/Universal/FaultTolerantWriteDxe/FaultTolerantWriteDxe/DEBUG/FaultTolerantWriteDxe.dll (ImageBase=00000000BDB92000, EntryPoint=00000000BDB95EF4) !!!!<br />&nbsp; &nbsp; &nbsp; &nbsp; ----------------------------------------------<br /><br /><strong>Last, I boot a Qemu VM with OVMF_CODE.fd and OVMF_VARS.fd:</strong><br /><br />&nbsp; &nbsp; a. For SEV/SEV-ES VM, the guest hungs in OVMF with the following assert message.<br /><br />&nbsp; &nbsp; &nbsp; &nbsp; ----------------------------------------------<br />&nbsp; &nbsp; &nbsp; &nbsp; Reserved variable store memory: 0xBFD7C000; size: 528kb<br />&nbsp; &nbsp; &nbsp; &nbsp; NvVarStore FV headers were invalid.<br />&nbsp; &nbsp; &nbsp; &nbsp; ASSERT [PlatformPei] /dev/shm/edk2/OvmfPkg/Library/PlatformInitLib/Platform.c(932): ((BOOLEAN)(0==1))<br />&nbsp; &nbsp; &nbsp; &nbsp; ----------------------------------------------


<div width="1" style="color:white;clear:both">_._,_._,_</div>
<hr>


Groups.io Links:<p>


  
    You receive all messages sent to this group.
  
  


<p>
<a target="_blank" href="https://edk2.groups.io/g/devel/message/119885">View/Reply Online (#119885)</a> |


  

|

  <a target="_blank" href="https://groups.io/mt/107157379/7686176">Mute This Topic</a>


| <a href="https://edk2.groups.io/g/devel/post">New Topic</a>

<br>




<a href="https://edk2.groups.io/g/devel/editsub/7686176">Your Subscription</a> |
<a href="mailto:devel+owner@edk2.groups.io">Contact Group Owner</a> |

<a href="https://edk2.groups.io/g/devel/unsub">Unsubscribe</a>

 [rebecca@openfw.io]<br>
<div width="1" style="color:white;clear:both">_._,_._,_</div>