Utilizing virtual input/output memory management units (iommu) for tracking encryption status of memory pages

A system, comprising:

• a memory;
• a processing device operatively coupled to the memory, the processing device configured to:
• create a virtual device associated with a virtual machine managed by a hypervisor, wherein the virtual device comprises a virtual input/output memory management unit (IOMMU);
• append a plurality of page table entries to a page table of the virtual IOMMU, wherein each page table entry of the plurality of page table entries references unencrypted memory pages used by the virtual machine;
• and
• responsive to receiving a memory access request with respect to a memory page, determine, using the page table of the virtual IOMMU, whether the memory page is encrypted.

A non-transitory machine-readable storage medium storing instructions that cause a processing device to:

• create a virtual device associated with a virtual machine managed by a hypervisor, wherein the virtual device comprises a virtual input/output memory management unit (IOMMU);
• append a plurality of page table entries to a page table of the virtual IOMMU, wherein each page table entry of the plurality of page table entries references unencrypted memory pages used by the virtual machine;
• and
• responsive to receiving a memory access request with respect to a memory page, determine, using the page table of the virtual IOMMU, whether the memory page is encrypted.