Enum IgvmAttestTestConfig 

pub enum IgvmAttestTestConfig {
    AkCertRequestFailureAndRetry,
    AkCertRequestFailureAndRetryExtended,
    AkCertPersistentAcrossBoot,
    AkCertPersistentAcrossBootExtended,
    KeyReleaseFailureSkipHwUnsealing,
    KeyReleaseFailure,
}

Configuration for the GED’s IGVM Attest request handler in test scenarios.

Non-extended variants (AkCertRequestFailureAndRetry, AkCertPersistentAcrossBoot) are used by OpenVMM-hosted tests that invoke the GED directly. Extended variants and the KeyReleaseFailure* variants are used by Hyper-V tests via the test_igvm_agent_rpc_server, where the Hyper-V boot sequence (including initial_reboot) generates extra IGVM attest requests before the test code runs.

Variants

AkCertRequestFailureAndRetry

Config for testing AK cert retry after failure.

Plan: two failures then one success. Used by OpenVMM-hosted tests where no extra boot-time requests occur.

AkCertRequestFailureAndRetryExtended

Config for testing AK cert retry after failure — extended plan for Hyper-V tests.

Hyper-V VMs go through an initial_reboot and may generate multiple background AK cert requests during the initial boot and the reboot. The extra failure actions absorb those requests so the final success action is available when the guest test code runs.

AkCertPersistentAcrossBoot

Config for testing AK cert persistency across boots.

Plan: one success then always-no-response. Used by OpenVMM-hosted tests where no extra boot-time requests occur.

AkCertPersistentAcrossBootExtended

Config for testing AK cert persistency across boots — extended plan for Hyper-V tests.

Hyper-V VMs go through an initial_reboot that can consume the first success action before the test code runs. The extra RespondSuccess ensures the cert is still provisioned after the reboot, so the subsequent boot can validate that the cert is served from the persistent cache.

KeyReleaseFailureSkipHwUnsealing

Config for testing the skip_hw_unsealing signal from the IGVM agent.

When the agent responds with skip_hw_unsealing, the attestation code skips the hardware unsealing step even if the hardware key protector and derived keys are available. This causes initialize_platform_security to fall through to a scheme-specific error (KP / GSP / GspById), making VMGS unlock fail.

KeyReleaseFailure

Config for testing key release failure without the skip_hw_unsealing signal.

When the agent responds with a plain failure (no skip signal), the attestation code falls back to hardware unsealing using the hardware key protector saved on the previous successful boot. The VM should boot normally.

Trait Implementations

impl Clone for IgvmAttestTestConfig

fn clone(&self) -> IgvmAttestTestConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for IgvmAttestTestConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl DefaultEncoding for IgvmAttestTestConfig

type Encoding = OneofEncoder

The encoding to use for the serialization.

impl Inspect for IgvmAttestTestConfig

fn inspect(&self, req: Request<'_>)

Inspects the object.

impl<'encoding> OneofDecode<'encoding, Resource> for IgvmAttestTestConfig

fn read_variant( item: &mut InplaceOption<'_, Self>, n: u32, field: FieldReader<'encoding, '_, Resource>, ) -> Result<()>

Read the specified variant from the reader.

impl OneofEncode<Resource> for IgvmAttestTestConfig

fn write_variant(self, writer: MessageWriter<'_, '_, Resource>)

Write the variant to the writer.

fn compute_variant_size(&mut self, sizer: MessageSizer<'_>)

Compute the size of the variant.

impl Copy for IgvmAttestTestConfig