centos 10 SEV version 3.0

[amd-aliem]

Achieved Certification Level 3.0.0-0

Certified level: 3.0.0-0
Max certification level: 3.0.0-0
Started: 2026-07-17T05:03:24.990026+00:00
Completed: 2026-07-17T05:03:39.408909+00:00

Environment

• Host OS: CentOS Stream 10 (Coughlan)
• Host kernel: 6.12.0-248.el10.x86_64
• Guest OS: CentOS Stream 10 (Coughlan)
• QEMU: 10.1.0 (qemu-kvm-10.1.0-24.el10)
• OVMF: edk2-ovmf-20260221-5.el10.noarch

Level 3.0.0-0

Test	Description	Result
attestation-test	Launch an SEV-SNP guest and verify attestation report	✅

Level 3.0.0-1

Test	Description	Result
snphost-config-commit	Test SNP_CONFIG and SNP_COMMIT host commands	✅

sev-verify output

   Guest:  /usr/local/lib/guest-image/guest.efi
   Host:   CentOS Stream 10 (Coughlan)
   Kernel: 6.12.0-248.el10.x86_64
   QEMU:   10.1.0 (qemu-kvm-10.1.0-24.el10)
   OVMF:   edk2-ovmf-20260221-5.el10.noarch

── Prerequisites ───────────────────────────────────────────────────────────────

   Verify SNP    Verify SEV-SNP is enabled and functional on the host and the right components are present
   Artifacts: artifacts/prereqs/Verify_SNP
   ├─ snphost ok ··················································· 31ms [PASS]
   ├─ snphost show guests ··········································· 7ms [PASS]
   └─ verify OVMF ··················································· 1ms [PASS]
   result:                                                     3/3 passed [PASS]

   Prerequisites:                                              1/1 passed [PASS]

── Certification 3.0 ───────────────────────────────────────────────────────────
   SEV 3.0 Tests (AMD EPYC 7003+)
   Max certification level: 3.0.0-0

   ── 3.0.0-0 ──
   attestation-test        Launch an SEV-SNP guest and verify attestation report
   Artifacts: artifacts/3.0/3.0.0-0/attestation_test
   ├─ Calculate measurement ······································· 172ms [PASS]
   ├─ Launch SEV-SNP guest ········································ 12.3s [PASS]
   ├─ Get attestation report with snpguest ························· 41ms [PASS]
   ├─ Pull report from guest ········································ 2ms [PASS]
   ├─ Pull request file from guest ·································· 2ms [PASS]
   ├─ Fetch certificate chain from kds ···························· 287ms [PASS]
   ├─ Fetch VCEK from kds ········································· 284ms [PASS]
   ├─ Verify certificate chain ······································ 5ms [PASS]
   ├─ Verify report signature and TCB values ························ 7ms [PASS]
   ├─ Verify Request data and Measurement ··························· 7ms [PASS]
   └─ Stop VM ······················································ 1.0s [PASS]
   result:                                                   11/11 passed [PASS]

   ── 3.0.0-1 ──
   snphost-config-commit            Test SNP_CONFIG and SNP_COMMIT host commands
   Artifacts: artifacts/3.0/3.0.0-1/snphost_config_commit
   ├─ show-tcb ······················································ 8ms [PASS]
   ├─ config-set-lower ············································ 103ms [PASS]
   ├─ verify-differ after config-set-lower ·························· 8ms [PASS]
   ├─ config-reset ·················································· 9ms [PASS]
   ├─ verify-match after config-reset ······························· 7ms [PASS]
   ├─ config-set-mask-chip-id ······································ 37ms [PASS]
   ├─ config-set-mask-chip-key ······································ 8ms [PASS]
   ├─ config-set-mask-both ·········································· 8ms [PASS]
   ├─ config-reset-masks ··········································· 38ms [PASS]
   ├─ verify-match after config-reset-masks ························· 9ms [PASS]
   └─ commit ························································ 4ms [PASS]
   result:                                                   11/11 passed [PASS]

   Certification 3.0:                                          2/2 passed [PASS]

   Wrote /root/results/cert-3.0.json
   Wrote /root/results/cert-3.0.md

── Summary ─────────────────────────────────────────────────────────────────────
   Certification 3.0:                                                  [3.0.0-0]