Microsoft Technology Licensing, LLC

Sarah Elizabeth Stephenson

Steve Pronovost

Jason Stewart Wohlgemuth

Aditya Bhandari

Jin Lin

Michael Bishop Ebersol

Kapil Vaswani

Attilio Mainetti

Antoine Jean Denis Delignat-lavaud

Steven Adrian West

Alexander Daniel Grest

Emily Cara Clemens

Dexuan Cui

Michael Halstead Kelley

Carolina Cecilia Perez-vargas

Methods, systems, and computer program products for direct assignment of physical devices to confidential virtual machines (VMs). At a first guest privilege context of a guest partition, a direct assignment of a physical device associated with a host computer system to the guest partition is identified. The guest partition includes the first guest privilege context and a second guest privilege context, which is restricted from accessing memory associated with the first guest privilege context. The guest partition corresponds to a confidential VM, such that a memory region associated with the guest partition is inaccessible to a host operating system. It is determined, based on a policy, that the physical device is allowed to be directly assigned to the guest partition. Communication between the physical device and the second guest privilege context is permitted, such as by exposing the physical device on a virtual bus and/or forwarding an interrupt.

Direct assignment of physical devices to confidential virtual machines

Growing community of inventors

Boston, MA, United States of America

Sarah Elizabeth Stephenson