Table of Contents
Advertisement
Chapter 4: UEFI BIOS
----------------------------------------------------------------
TME, TME-MT, TDX
----------------------------------------------------------------
Memory Encryption (TME) (Available when your CPU supports Intel TME)
Select Enabled for Intel Total Memory Encryption (TME) support to enhance memory data
security. The options are Disabled and Enabled.
Total Memory Encryption (TME) Bypass (Available when "Memory Encryption (TME)"
is set to Enabled)
Use this feature to disable/enable the TME function for physical memory protection. The
options are Auto, Disabled, and Enabled.
Total Memory Encryption Multi-Tenant (TME-MT) (Available when "Memory
Encryption (TME)" is set to Enabled and when "Limit CPU PA to 46 Bits" is set to
Disable)
Use this feature to support tenant-provided (SW-provided) keys. The options are Disabled
and Enabled.
Memory Integrity (Available when both "Memory Encryption (TME)" and "Total
Memory Encryption Multi-Tenant (TME-MT)" are set to Enabled and when "Limit CPU
PA to 46 Bits" is set to Disable)
Use this feature to enable TME-MT memory integrity protection for memory transactions. The
options are Disabled and Enabled.
Key Stock Amount (Available when "Memory Encryption (TME)" is set to Enabled
and when your system supports this feature)
Use this feature to set the number of unique keys per system (the number of tenants per
platform). The default setting is 0.
TME-MT Key ID Bits (Available when "Memory Encryption (TME)" is set to Enabled)
Use this feature to set the number of bits for each key ID. The default setting is 0.
Trust Domain Extension (TDX) (Available when your CPU supports Intel TDX)
Use this feature to enable Intel Trust Domain Extension (TDX) technology support to enhance
control of data security. The options are Disabled and Enabled.
TDX Secure Arbitration Mode Loader (SEAM Loader) (Available when your CPU
supports Intel TDX)
The SEAM Loader (SEAMLDR) is used to load and update Intel TDX modules into the SEAM
memory range by verifying the digital signature. The options are Disabled and Enabled.
105
Advertisement
Table of Contents
