Testing the Sign and Debug of a VBS Enclave in a Virtual Machine

ken 0 Reputation points
2024-07-31T09:27:52.37+00:00

Is it possible to sign and debug a VBS enclave inside a virtual machine without having to disable secure boot on the host machine for developing the enclave? I have tried to use VMware, but it didn't work.

Hyper-V
Hyper-V
A Windows technology providing a hypervisor-based virtualization solution enabling customers to consolidate workloads onto a single server.
2,737 questions
Windows 10 Security
Windows 10 Security
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
2,932 questions
Windows 11
Windows 11
A Microsoft operating system designed for productivity, creativity, and ease of use.
9,940 questions
Azure Trusted Signing
Azure Trusted Signing
Trusted Signing is a Microsoft fully managed, end-to-end signing solution that simplifies the certificate signing process and helps partner developers more easily build and distribute applications.
113 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Neuvi Jiang 1,460 Reputation points Microsoft Vendor
    2024-08-02T07:35:26.39+00:00

    Hi ken,

    Thank you for posting in the Q&A Forums.

    Signing and debugging a VBS enclave within a virtual machine without disabling secure boot on the host may be limited by a number of factors. This depends on the support of the hypervisor, the configuration of the host, and the specific requirements of the development environment. Whenever possible, it is recommended that development and debugging be performed on an operating system that supports VBS and secure boot to ensure the security and reliability of the application. If development and debugging must be performed in a virtual machine, make sure that the hypervisor can support the required configuration and operate as far as possible without compromising system security.

    Best regards

    NeuviJ

    ============================================

    If the Answer is helpful, please click "Accept Answer" and upvote it.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.