Preparing pass-through devices for cryptographic adapter resources

Edit online

To make an AP queue eligible as a VFIO pass-through device, you must bring it under control of the vfio_ap device driver and you must create and configure a mediated device for it.

For a mediated device with a specific AP queue configuration that persists across KVM host reboots, you must perform the following tasks on the host.

Persistently free the AP queues on the host: Persistently bring the AP queues under control of the vfio-ap device driver by using the chzdev command, see Free AP queues for use by KVM guests.
Create a persistent mediated device and configure it as an autostart device: Create a persistent mediated device with the AP queues by using the virsh nodedev-define command. Include this persistent mediated device in the host's autostart configuration with the virsh nodedev-autostart command. See Creating a mediated device with AP queues.