Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
@@ -0,0 +1,67 @@
---
title: Arm CCA Boot Sync
description: Learn how to use Arm CCA Boot Sync while launching Arm CCA Realms on an FVP with RME support.

minutes_to_complete: 60

who_is_this_for: This Learning Path is for developers who want to understand how to use Arm CCA Bootsync.

learning_objectives:
- Gain an overview of Arm CCA Boot Sync and Boot Onjection Protocol.
- Understand how Arm CCA Boot Sync can be used for defining UEFI variables, enabling Secure Boot and share secure data with Arm CCA Realms.
- Lanch Arm CCA Realms with Secure Boot enabled and encrypted file system using an Armv9-A AEM Base Fixed Virtual Platform (FVP) with RME support.

prerequisites:
- An AArch64 or x86_64 computer running Linux or macOS. Cloud-based instances can also be used; see the [Arm cloud service providers](/learning-paths/servers-and-cloud-computing/csp/)
- Completion of the [Run an application in a Realm using the Arm Confidential Compute Architecture (CCA)](/learning-paths/servers-and-cloud-computing/cca-container) Learning Path

author:
- Anton Antonov
- Pareena Verma

generate_summary_faq: true
rerun_summary: false
rerun_faqs: false

### Tags
skilllevels: Advanced
subjects: Performance and Architecture
armips:
- Neoverse
- Cortex-A
operatingsystems:
- Linux
- macOS
tools_software_languages:
- FVP
- RME
- CCA
- Docker
- EDK2
- Cryptsetup

further_reading:
- resource:
title: Arm Confidential Compute Architecture
link: https://www.arm.com/architecture/security-features/arm-confidential-compute-architecture
type: website
- resource:
title: Arm Confidential Compute Architecture Open-Source enablement
link: https://www.youtube.com/watch?v=JXrNkYysuXw
type: video
- resource:
title: Learn the architecture - Realm Management Extension
link: https://developer.arm.com/documentation/den0126
type: documentation
- resource:
title: Realm Management Monitor Specification
link: https://developer.arm.com/documentation/den0137/latest/
type: documentation

### FIXED, DO NOT MODIFY
# ================================================================================
weight: 1 # _index.md always has weight of 1 to order correctly
layout: "learningpathall" # All files under learning paths have this same wrapper
learning_path_main_page: "yes" # This should be surfaced when looking for related content. Only set for _index.md of learning path content.
---

Original file line number Diff line number Diff line change
@@ -0,0 +1,8 @@
---
# ================================================================================
# FIXED, DO NOT MODIFY THIS FILE
# ================================================================================
weight: 21 # Set to always be larger than the content in this path to be at the end of the navigation.
title: "Next Steps" # Always the same, html page title.
layout: "learningpathall" # All files under learning paths have this same wrapper for Hugo processing.
---
Original file line number Diff line number Diff line change
@@ -0,0 +1,21 @@
---
# User change
title: "Overview of Arm CCA BootSync and Boot Injection protocol"

weight: 2 # 1 is first, 2 is second, etc.

# Do not modify these elements
layout: "learningpathall"
---

## Design overview

TO_DO: Explain Boot Injection protocol and Arm CCA Boot Sync wokflow.

For more details see:

- [ArmCcaBootSync/Readme.md](https://gitlab.arm.com/linux-arm/edk2-cca/-/blob/cca/4441_measured_boot_v1/ArmVirtPkg/ArmCcaBootSync/Readme.md)
- Appendix A (Boot Injection) in [the RHI specifications document](https://confluence.arm.com/display/FENIMORE/RHI+specification)


In the next section, you will launch realms and see how Arm CCA BootSync can be used.
Loading
Loading