Omit items that conflict with IBM Secure Execution for Linux
Do not configure the virtual server with devices and settings that are incompatible with IBM® Secure Execution for Linux®.
Omit VFIO pass-through devices
The domain configuration-XML must not configure any VFIO pass-through devices such as: VFIO DASD, VFIO PCI devices, or cryptographic resources that are set up and configured as VFIO devices.Tip: Scan the domain configuration-XML for
vfio. In particular, there must be no driver elements with
name="vfio" and
no hostdev elements with model="vfio-ccw".Do not back your guest memory with huge pages
The domain configuration-XML must not include the hugepages element.