Secure peripheral device state transfer during trusted virtual machine migration

An apparatus for secure peripheral device state transfer during trusted virtual machine migration, comprising:

• a memory;
• and
• one or more processing devices, operatively coupled to the memory, the one or more processing devices configured to:
• receive, by a first instance of a trusted virtual machine and from a first peripheral device coupled to a first host executing the first instance of the trusted virtual machine, a first hash value calculated in a trusted execution environment of the first host and based on a state of the first peripheral device;
• load, by the first instance of the trusted virtual machine, a second hash value calculated based on a state of a second peripheral device coupled to a second host;
• and
• trust, by the first instance of the trusted virtual machine, the first peripheral device based on a match between the first hash value and the second hash value.

A non-transitory computer readable storage medium storing instructions which, when executed, cause a processing device to:

• receive, by a first instance of a trusted virtual machine and from a first peripheral device coupled to a first host executing the first instance of the trusted virtual machine, a first hash value calculated in a trusted execution environment of the first host and based on a state of the first peripheral device;
• load, by the first instance of the trusted virtual machine, a second hash value calculated based on a state of a second peripheral device coupled to a second host;
• and
• trust, by the first instance of the trusted virtual machine, the first peripheral device based on a match between the first hash value and the second hash value.