• Edge Microvisor Toolkit Documentation
  • Why Use Edge Microvisor Toolkit
    • Customers Highlights
    • Developers Highlights
    • Key Performance Indicators
  • License Information
  • Next Steps
    • Get Started
      • Usage Scenarios
      • Install Edge Microvisor Toolkit
      • Host Guest VMs under Edge Microvisor Toolkit
        • Edge Microvisor Toolkit with Edge Manageability Framework
      • Image Support
      • Next Steps
        • Build Your Own Edge Microvisor Toolkit
          • Build the Toolchain
          • Build the Edge Microvisor Toolkit Image
          • Customize Your Edge Microvisor Toolkit Image
            • Example 1: Adding an existing RPM (Nano)
            • Example 2: Adding a new RPM package
            • Example 3: Generating user passwords
        • Install Edge Microvisor Toolkit
          • Next
            • Deploying Edge Microvisor Toolkit on Bare Metal
              • Requirements
              • Creating Bootable USB
                • Flashing ISO
                  • On Linux OS
                  • On Windows OS
                    • Rufus workflow
                • Flashing RAW
                • Booting from USB
              • Installing Edge Microvisor Toolkit Developer Node
              • Installing Edge Microvisor Toolkit Standalone Node
            • Deploying Edge Microvisor Toolkit on Virtual Machines as Guest OS
              • Hyper-V
              • Oracle Virtual Box
                • Converting Image File to VDI
              • KVM
                • Support for Disk Image Formats
                • Converting Image File to QCOW2
              • QEMU and UEFI
                • Create Virtual Machine using ISO
                • Create Virtual Machine using RAW or VHD
            • Deploying Other OS as Guest Virtual Machines under EMT Host
    • Architecture Overview
      • Edge Microvisor Toolkit
      • Edge Microvisor Toolkit Image Versions
        • Developer Node mutable ISO image
        • Standalone Node immutable RAW images
          • Standard kernel with integrated Docker and K3S
          • Kernel with real-time extensions, and integrated Docker and K3S
          • Desktop Virtualization - standard Kernel without real-time extensions
      • Edge Microvisor Toolkit Real Time
        • Preempt RT Kernel
        • perf tool
        • Turbostat
        • cpupower
        • Kernel Command Line
      • Build Artifacts
      • Packaging
      • Unified Kernel Image
      • Hostfile system and Persistent Partition
        • tmpfs
        • Persistent-Bind Paths
      • Bare Metal Agents
        • Hardware Discovery Agent
        • Platform Update Agent
        • Node Agent
        • Cluster Agent
        • Telemetry Agent
        • Observability Agent
        • Reporting Agent
      • Atomic Updates
        • A/B Update Paradigm
        • Active vs. Inactive Partitions
        • Update Process
        • Benefits of The Approach
        • Updating Open Edge Platform vs. Standalone
    • Production Deployment with Edge Orchestrator
      • OS Deployment and Update Workflow
        • Update Process
      • Learn More
    • Edge Microvisor Bootkit
      • Building the Bootkit image
      • Integration with Edge Manageability Framework and Edge Microvisor Toolkit Standalone Node
      • Edge Manageability Framework (orchestrator) Specific Builds
        • Orchestrator Build with HookOS (previous workflow)
        • Orchestrator Build with Bootkit (new workflow)
      • Edge Microvisor Toolkit Standalone Node Specific Builds
        • Microvisor Build with HookOS (previous workflow)
        • Microvisor Build with Bootkit (new workflow)
    • Edge Microvisor Toolkit Security Considerations
      • EMT Security Overview
      • Enabling Secure Boot for EMT
      • Security Policy
      • Reporting a Vulnerability
        • Enable Secure Boot for Edge Microvisor Toolkit
          • RAW and VHD Image
            • Step 1: Verify your Certificate File
            • Step 2: Convert DER to PEM (if necessary)
            • Step 3: Enroll the Certificate in the UEFI/BIOS
            • Step 4: Enable Secure Boot
          • ISO Image
            • Prerequisites
            • Step 1: Generate Local Signing Certificates
            • Step 2: Rebuild the shim-unsigned Package
            • Step 3: Build the shim Package
            • Step 4: Install the new shim-x64 Package
            • Step 5: Sign the Boot Loader and Kernel
            • Step 6: Enroll KeyInDB into UEFI DB
            • Step 7: Enable Secure Boot and Test
        • Edge Microvisor Toolkit Security Overview
          • Secure Boot and Trusted Boot
            • Platform Keys and Image Integrity
          • Immutability
            • Runtime Immutability
            • Protection of the Root Partition at Rest
            • Application Deployment and Data Persistence
            • Mitigating Offline Storage Attacks - dm-verity
          • Full Disc Encryption (FDE)
            • How FDE is Implemented
            • Key Management and Boot Process
            • Protection Against Physical Attacks
          • SELinux
    • Edge Microvisor Toolkit Contribution Guide
      • New Features
      • Contribution Flow
      • Contribution license
    • Edge Microvisor Toolkit Troubleshooting
    • System Requirements
      • Hardware Requirements
      • Recommended Hardware Configuration
        • Edge Microvisor Toolkit Developer Node
        • Edge Microvisor Toolkit (Open Edge Platform or Standalone Node)
      • Software Requirements