On Thu, 17 Jul 2025 11:33:49 -0700 Dan Williams <dan.j.williams@xxxxxxxxx> wrote: > A "TSM" is a platform component that provides an API for securely > provisioning resources for a confidential guest (TVM) to consume. The > name originates from the PCI specification for platform agent that > carries out operations for PCIe TDISP (TEE Device Interface Security > Protocol). > > Instances of this core device are parented by a device representing the > platform security function like CONFIG_CRYPTO_DEV_CCP or > CONFIG_INTEL_TDX_HOST. > > This device interface is a frontend to the aspects of a TSM and TEE I/O > that are cross-architecture common. This includes mechanisms like > enumerating available platform TEE I/O capabilities and provisioning > connections between the platform TSM and device DSMs (Device Security > Manager (TDISP)). > > For now this is just the scaffolding for registering a TSM device sysfs > interface. > > Cc: Xiaoyao Li <xiaoyao.li@xxxxxxxxx> > Cc: Isaku Yamahata <isaku.yamahata@xxxxxxxxx> > Cc: Alexey Kardashevskiy <aik@xxxxxxx> > Cc: Yilun Xu <yilun.xu@xxxxxxxxx> > Cc: Tom Lendacky <thomas.lendacky@xxxxxxx> > Cc: John Allen <john.allen@xxxxxxx> > Co-developed-by: Aneesh Kumar K.V (Arm) <aneesh.kumar@xxxxxxxxxx> > Signed-off-by: Aneesh Kumar K.V (Arm) <aneesh.kumar@xxxxxxxxxx> > Signed-off-by: Dan Williams <dan.j.williams@xxxxxxxxx> Nice. One trivial comment inline. Reviewed-by: Jonathan Cameron <jonathan.cameron@xxxxxxxxxx> > diff --git a/drivers/virt/coco/Makefile b/drivers/virt/coco/Makefile > index f918bbb61737..c0c3733be165 100644 > --- a/drivers/virt/coco/Makefile > +++ b/drivers/virt/coco/Makefile > @@ -2,9 +2,11 @@ > # > # Confidential computing related collateral > # > + Unrelated change. > obj-$(CONFIG_EFI_SECRET) += efi_secret/ > obj-$(CONFIG_ARM_PKVM_GUEST) += pkvm-guest/ > obj-$(CONFIG_SEV_GUEST) += sev-guest/ > obj-$(CONFIG_INTEL_TDX_GUEST) += tdx-guest/ > obj-$(CONFIG_ARM_CCA_GUEST) += arm-cca-guest/ > +obj-$(CONFIG_TSM) += tsm-core.o > obj-$(CONFIG_TSM_GUEST) += guest/
