Updating secure guest metadata of a specific guest instance

A security system for a secure modification of metadata of a secure guest instance that is personalized by an initialization code, wherein the secure guest instance originates from a generic boot image, using a trusted firmware that maintains metadata of the secure guest instance, the security system comprising:

• a processor and a memory operational coupled to the processor, where the memory stores program code portions, which when executed by the processor enable the processor to:
• start a secure guest instance using a hypervisor based on the generic boot image;
• receive, using the secure guest instance, user-specific data;
• personalize, using the secure guest instance, the secure guest instance using the user-specific data;
• receive, using the secure guest instance, a request structure for modifying the metadata of the secure guest instance;
• verify partially, using the secure guest instance, the request structure using the user-specific data and upon successful verification passing the request structure to the trusted firmware for modifying the metadata of the secure guest instance;
• verify, using the trusted firmware, the request structure and upon success;
• and
• modify the metadata, as specified by the request structure.

A computer program product for a securely modification of metadata of a secure guest instance that is personalized by an initialization code, wherein the secure guest instance originates from a generic boot image, using a trusted firmware that maintains metadata of the secure guest instance, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions being executable by one or more computing systems or controllers to cause the one or more computing systems to:

• start a secure guest instance using a hypervisor based on the generic boot image;
• receive, using the secure guest instance, user-specific data;
• personalize, using the secure guest instance, the secure guest instance using the user-specific data;
• receive, using the secure guest instance, a request structure for modifying the metadata of the secure guest instance;
• verify partially, using the secure guest instance, the request structure using the user-specific data and upon successful verification passing the request structure to the trusted firmware for modifying the metadata of the secure guest instance;
• verify, using the trusted firmware, the request structure and upon success;
• and
• modify the metadata, as specified by the request structure.