6.2. Configuring a RHEL instance on Amazon Web Services with AMD SEV SNP

Prerequisites

• You have installed the awscli2, openssh, and openssh-clients packages.
• You have created an AWS EC2 instance using an AMD EPYC processor-based machine type from the supported list. For details, see supported instance types.

• You have checked if SEV-SNP is enabled for the RHEL instance:

  $ aws ec2 describe-instances --instance-ids <example_instance_id> \
  --region <example_region>

  ...
  "CpuOptions": {
  "CoreCount": 2,
  "ThreadsPerCore": 2,
  "AmdSevSnp": "enabled"
  },
  ...

  참고

  Before configuring a RHEL instance on AWS with AMD SEV-SNP, check with your cloud service provider. Verify the support status and certification of your particular RHEL instance type.

Verification

• Check kernel logs to verify status of SEV-SNP:

  $ dmesg | grep -i sev

  ...
  [    7.509546] Memory Encryption Features active: AMD SEV SEV-ES SEV-SNP
  [    8.469487] SEV: Using SNP CPUID table, 64 entries present.
  [    9.433348] SEV: SNP guest platform device initialized.
  [   33.314380] sev-guest sev-guest: Initialized SEV guest driver (using vmpck_id 0)
  ...