Create a Workflow - AMD SEV-SNP

1.0 Introduction

This article describes the steps to create workflows in Fortanix Confidential Computing Manager (CCM) for Advanced Micro Devices (AMD) Secure Encrypted Virtualization (SEV) - Secure Nested Paging (SNP).

There are three types of workflows: Draft, Pending, and Final.

• Draft workflows: Draft workflows are in-progress workflows that are still under development. These workflows have not been submitted for approval.

• Pending workflows: Pending workflows represent workflows that have been submitted for approval but have not yet received approval from all required users.

• Final workflows: Final workflows are approved and versioned workflows protected by quorum approval. Once approved, the workflow can be deployed.

To convert a Draft workflow into a Final workflow, approvals are required from the users participating in the workflow.

The Application Owner builds the workflow graph. Once the workflow graph is complete, the Administrator submits it for approval. A workflow graph must be approved by all participating users before it becomes a Final workflow.

2.0 Create a Workflow

Perform the following steps to create a workflow:

1. In the CCM UI left navigation panel, click the Workflows menu item.  

2. On the Workflows page, click + ADD WORKFLOW to create a new workflow.

   

3. On the WORKFLOW form:  

   1. Name: Enter a name for the workflow.

   2. Group: Select the group for the shared workflow. If you do not select a group, Fortanix CCM uses the default group.

   3. Click SAVE to create the workflow.

4. Add an application to the workflow graph. Drag the Application icon from the component panel and drop it into the graph area.

5. Click ADD APPLICATION. In the APPLICATION form, select the AMD SEV-SNP application image and its corresponding application configuration.  

   For more information on creating an application, refer to Add and Edit an Application.

6. After the workflow is completed, click SAVE AND REQUEST APPROVAL to initiate the workflow approval process.

   WARNING

   When a draft workflow is submitted for approval, it is removed from the Drafts list. The workflow cannot be edited while it is in the Pending or Approved state.

7. The workflow remains in a pending state until it receives approval. In the Pending menu item, click VIEW REQUEST to approve a Workflow.

8. In the APPROVAL REQUEST FOR CREATING WORKFLOW dialog box, click APPROVE.

9. Navigate to the workflow application in Fortanix CCM and copy the Runtime configuration hash from the Application dialog box.