Secure interface control high-level instruction interception for interruption enablement

A computer program product comprising a non-transitory computer readable storage medium having program instructions embodied therewith, the program instructions executable by a computer to cause operation of:

• fetching, by a secure interface control of a computer that provides a partial instruction interpretation for an instruction which enables an interruption, a program status word or a control register value from a secure guest storage;
• notifying, by the secure interface control, an untrusted entity of guest interruption mask updates, the untrusted entity being executed on and in communication with hardware of the computer through the secure interface control to support operations of a secure entity executing on the untrusted entity;
• receiving, by the secure interface control from the untrusted entity, a request to present a highest priority, enabled guest interruption in response to the notifying of the guest interruption mask updates;
• and
• moving, by the secure interface control, interruption information into a guest prefix page and injecting the interruption in the secure entity when an injection of the interruption is determined to be valid,
• wherein the secure interface control includes a secure interface between the untrusted entity and the secure entity, the secure interface including a hardware mechanism that prevents the untrusted entity from accessing contents of the secure guest storage.

A system comprising:

• a secure interface control of a computer that provides a partial instruction interpretation for an instruction which enables an interruption;
• fetching, by the secure interface control, a program status word or a control register value from a secure guest storage;
• notifying, by the secure interface control, an untrusted entity of guest interruption mask updates, the untrusted entity being executed on and in communication with hardware of the computer through the secure interface control to support operations of a secure entity executing on the untrusted entity;
• receiving, by the secure interface control from the untrusted entity, a request to present a highest priority, enabled guest interruption in response to the notifying of the guest interruption mask updates;
• and
• moving, by the secure interface control, interruption information into a guest prefix page and injecting the interruption in the secure entity when an injection of the interruption is determined to be valid,
• wherein the secure interface control includes a secure interface between the untrusted entity and the secure entity, the secure interface including a hardware mechanism that prevents the untrusted entity from accessing contents of the secure guest storage.