I have a new Dell 7530 mobile workstation that I just started configuring.
This machine uses an Intel Xeon E-2186M and has 32 GB of ECC DRAM. This CPU fully supports the latest hardware virtualization technologies (VT-x, VT-d, EPT).
Initially this machine will be running Windows 10 due to lack of time to switch operating systems. I really hope to have time in about a year to invest in switching to Linux, as I hate the Bea$t's new spyware as a service business model. I certainly will be running Linux virtual machines on it in the interim.
One of my first steps was to go into its BIOS and pour thru all the settings. I was pleased to see that Dell's defaults were mostly good, only a few changes were needed. For example, it was default configured for Secure Boot.
In its Virtualization Support section, they enabled both "Intel Virtualization Technology" (VT-x) and "VT for Direct I/O" (VT-d) by default, which is also good.
However, there was a 3rd option for Intel's Trusted Execution Technology (TXT) that was disabled. I think that the BIOS description said this:
This option specifies whether a Measured Virtual Machine Monitor (MVMM) can utilize the additional hardware capabilities provided by Intel Trusted Execution Technology. The TPM Virtualization Technology, and Virtualization technology for direct I/O must be enabled to use this feature.
Trusted Execution - disabled by default.
I say "think" because the official Dell documentation for the 7530's BIOS, as of today, does not not mention that option. The text above is for the Dell Latitude E7470, altho it is what I recall my BIOS saying.
From that description, plus Intel's whitepaper, it sounds like something that I would want to enable, since I for sure will be using VirtualBox (and in the future, something more powerful like KVM or Xen). Unfortunately, a web search found no endorsements for that theory.
Instead, all I have found is several reports saying to turn off, especially on Dell systems, for both VirtualBox and KVM: link 1, link 2. (My original question put more links in here, but when I tried to submit, this website claimed that my question was spam...)
Does anyone know the definitive answer?
I note that some of the links saying not to enable it go back several years, so perhaps it was once true advice that now is no longer valid?