Microsoft Technology Licensing, LLC

Emily Cara Clemens

Jason Stewart Wohlgemuth

Steven Adrian West

Scott Chao-Chueh Lee

Steve Pronovost

James George Cavalaris

Emily Nicole Wilson

Shen Wang

James Anthony Schwartz, Jr

Aditya Bhandari

Gaurav Jagtiani

Michael Bishop Ebersol

Jin Lin

Naga Govindaraju

Yuri Dotsenko

Kapil Vaswani

Minsang Kim

Binit Ranjan Mishra

Attilio Mainetti

Emma Sutherland Boyd

Antoine Jean Denis Delignat-lavaud

Aacer Hatem Daken

Cody D Hartwig

Alexander Daniel Grest

Peter Hanpeng Jiang

Raz Meir Aloni

Terence Kwok Tak Chan

Jennifer Marie Bourlier

Sharon Scarlet Tang

Drew Douglas Cross

Sri Harsha Kanukuntla

Mukhtar Ahmed

Christina Marianne Curlette

Vijaybalaji Madhanagopal

Carolina Cecilia Perez-vargas

Sarah Elizabeth Stephenson

Michael Halstead Kelley

Dexuan Cui

In-place recovery of fatal system errors at virtualization hosts. A device identifies an occurrence of a fatal system error in the first instance of a host operating system (OS) executing in a computer system. The device determines to perform an in-place recovery for the fatal system error. The device performs the in-place recovery, including pausing the execution of a virtual machine (VM) by the first instance of the host OS, preserving a state of the VM within system memory of the computer system, and resuming the execution of the VM by a second instance of the host OS executing in the computer system based on the state of the VM that is preserved within the system memory of the computer system.

In-place recovery of fatal system errors at virtualization hosts

Methods, systems, and computer program products for direct assignment of physical devices to confidential virtual machines (VMs). At a first guest privilege context of a guest partition, a direct assignment of a physical device associated with a host computer system to the guest partition is identified. The guest partition includes the first guest privilege context and a second guest privilege context, which is restricted from accessing memory associated with the first guest privilege context. The guest partition corresponds to a confidential VM, such that a memory region associated with the guest partition is inaccessible to a host operating system. It is determined, based on a policy, that the physical device is allowed to be directly assigned to the guest partition. Communication between the physical device and the second guest privilege context is permitted, such as by exposing the physical device on a virtual bus and/or forwarding an interrupt.

Direct assignment of physical devices to confidential virtual machines

Growing community of inventors

Redmond, WA, United States of America

Emily Cara Clemens