Hardware Requirements

  • A TPM (v1.2) The BIOS feature is often called something like “embedded security device”
  • Hardware Virtualization extensions
    • AMD: Secure Virtual Machine (SVM) or AMD Virtualization (AMD-V)
    • Intel: Virtualization Technology (VT-x)
  • Hardware Support for DMA Isolation
    • AMD: Device Exclusion Vector (DEV)
    • Intel: Virtualization Technology for Directed I/O (VT-d)
  • 2nd-level page tables Typically turned on implicitly along with Virtualization extensions, if the processor supports it.
    • AMD: Nested Page Tables (NPT)
    • Intel: Extended Page Tables (EPT)
  • Dynamic root of trust


When purchasing a new machine, do not take it for granted that any newer Intel or AMD processor will have the necessary capabilities.