1# SPDX-License-Identifier: GPL-2.0-only 2config ARCH_SUPPORTS_RMM 3 bool 4 5config ARM_RMM_RMI 6 bool "Realm Management Interface (RMI) Support" 7 depends on ARCH_SUPPORTS_RMM 8 help 9 Support the Realm Management Monitor (RMM) on Arm systems that 10 implement the Realm Management Extension (RME), as defined by the 11 Arm Confidential Compute Architecture. 12 13 The RMM runs at EL2 in the Realm world and provides the Realm 14 Management Interface (RMI) used by a Normal World host to create, 15 manage and run protected virtual machines called Realms. The RMM can 16 also act as a TSM, as defined by the PCIe TDISP and can manage the 17 PCI IDE setup for securing the PCIe links. 18 19 This option builds the host-side RMI support used by KVM to detect a 20 compatible RMM, configure it, manage delegated memory and enable 21 Realm guests. 22 23 Selecting this option does not by itself make Realm guests available: 24 the system must also provide RME-capable hardware and firmware with a 25 compatible RMM implementation. 26 27config ARM_RMM_RSI 28 bool "Realm Service Interface (RSI) Support" 29 depends on ARCH_SUPPORTS_RMM 30 default y 31 help 32 Enable support for running Linux as a Realm guest under a Realm 33 Management Monitor (RMM), as defined by the Arm Confidential 34 Compute Architecture. 35 36 The RMM exposes the Realm Service Interface (RSI) to Realm guests. 37 Linux uses RSI to negotiate the interface version, obtain the Realm 38 configuration, and manage the protected or shared state of guest 39 memory. 40