Thanks Pushed as cec6bb18ae97..fe34d84a73cf

Hello Heinrich, The patches are under review. Will complete the review and merge by end of this week. With Warm Regards, Edhay

From: Tom Lendacky <thomas.lendacky@...> Register reviewers for the SEV-related files in OvmfPkg. Cc: Laszlo Ersek <lersek@...> Cc: Leif Lindholm <leif@...> Cc: Michael D Kinney

From: Tom Lendacky <thomas.lendacky@...> BZ: https://bugzilla.tianocore.org/show_bug.cgi?id=2198 Before UEFI transfers control to the OS, it must park the AP. This is done using the

From: Tom Lendacky <thomas.lendacky@...> BZ: https://bugzilla.tianocore.org/show_bug.cgi?id=2198 After having transitioned from UEFI to the OS, the OS will need to boot the APs. For an SEV-ES

From: Tom Lendacky <thomas.lendacky@...> BZ: https://bugzilla.tianocore.org/show_bug.cgi?id=2198 A hypervisor is not allowed to update an SEV-ES guest's register state, so when booting an SEV-ES

From: Tom Lendacky <thomas.lendacky@...> BZ: https://bugzilla.tianocore.org/show_bug.cgi?id=2198 Typically, an AP is booted using the INIT-SIPI-SIPI sequence. This sequence is intercepted by the

From: Tom Lendacky <thomas.lendacky@...> BZ: https://bugzilla.tianocore.org/show_bug.cgi?id=2198 When starting APs in an SMP configuration, the AP needs to know if it is running as an SEV-ES

From: Tom Lendacky <thomas.lendacky@...> BZ: https://bugzilla.tianocore.org/show_bug.cgi?id=2198 A hypervisor is not allowed to update an SEV-ES guests register state, so when booting an SEV-ES

BZ: https://bugzilla.tianocore.org/show_bug.cgi?id=2888 *** NetworkPkg\HttpBootDxe\HttpBootClient.c 2020-05-07 22:54:46.000000000 +05-30 --- NetworkPkg\HttpBootDxe\HttpBootClient.c

Thank you Mike to help on this. I also believe that the best option is to integrate the auto-gen process in base tool.

Reviewed-by: Alexei Fedorov <Alexei.Fedorov@...>

Hi Jiewen, For this use case, generating the files as part of the build process would add a dependency in pearl. Based on other recent CryptoPkg changes and some being discussed in BZ, I am seeing

+ Mike Kinney I am not sure if it is a right way to check in auto-generated file. That means, whenever we upgrade the openssl, we need manually generate them again. Any step by step, or readme to

Reviewed-by: Alexei Fedorov <Alexei.Fedorov@...>

Thanks Matthew. I am OK, if you want to address the RDSEED in follow-up patch series. Would you please file a new Bugzilla to record this, so we won't lose the information ?

Reviewed-by: Pete Batard <pete@...>

OK. I just see you describe that in v6 0/5 (not in v6 3/5 or Bugzilla 1871). However, 0/5 will not be committed and information might be lost. Would you please add your response in

Hi Christopher Thanks. 1) Would you please help me understand more on "ApiHooks.c contains a stub function for a Windows API call" ? Why we need this? If it is compiler specific in openssl, should we

Hi Matthew Carlson Do you have any thought on the feedback below? Do you make any update in your patch V6?