Skip to content



  • Is a derivative of OvmfPkg.
  • Will not support Legacy BIOS or CSM.
  • WIll not support S3 sleep functionality.
  • Has a 32-bit PEI phase and a 64-bit DXE phase.
  • Seeks to enable a tightly constrained virtual platform based on the QEMU Q35 machine type.

By solely focusing on the Q35 chipset, this package can be optimized such that it is allowed to break compatibility with other QEMU supported chipsets. The Q35 chipset can be paired with an IA32 or X64 processor to enable a machine that can emulate PC class hardware with industry standard features like SMM and PCI-E.

Table of Contents

Q35 Platform

Q35 is a machine type that QEMU emulates. Below is a diagram from about the Q35 chipset which emulates a ICH9 (I/O controller hub).

Q35 ICH9

The advantages of the ICH9 over the I440FX (which is what QEMU often emulates) is that it has PCI-E instead of just PCI as well as having an integrated AHCI controller and no ISA bus.

Visit the feature wiki detailing QEMU Q35 for more information:

Compiling and Running QEMU

QemuQ35Pkg uses the Project Mu repositories and Edk2 PyTools for its build operations. Specific details can be found here Development/

Firmware Features

QemuQ35Pkg is a great environment to demonstrate Project Mu features without any restricted or costly physical hardware. Current QEMU Q35 platform supports the following features provided by Project Mu:


CodeQL is open source and free for open-source projects. It is maintained by GitHub and naturally has excellent integration with GitHub projects. CodeQL uses a semantic code analysis engine to discover vulnerabilities in a number of programming languages (both compiled and interpreted).

Project Mu (and TianoCore) use CodeQL C/C++ queries to find common programming errors and security vulnerabilities in firmware code. This platform leverages the CodeQL build plugin from Mu Basecore that makes it very easy to run CodeQL against this platform. You simply use provide the --codeql argument in your normal stuart_update and stuart_build commands.


Color Bar

Color bars are used to quickly convey the Device state, based upon the DeviceStateLib. Color bars are displayed by the ColorBarDisplayDeviceStateLib.



Project Mu offers a UEFI configuration feature with example implementation in QemuQ35Pkg. Background about the features and more details about its integration in this repo are available in the detailed readme.


Device Firmware Configuration Interface (DFCI)

The DFCI feature enables cloud management services (MDM services like Microsoft Intune) to manage some PC bios settings securely. DFCI is a foundational feature that provides a shared identity and ownership model between the device firmware and the cloud. Once a device is enrolled this shared identity can be used to securely communicate across untrusted mediums (network or usb).


Mu Front Page

This feature enables the Project Mu OEM sample "front page".

This is a touch friendly, graphical, UEFI HII based UI application that allows basic platform and boot device configuration.


Mu Telemetry / WHEA / HwErrorRecord

The Mu Telemetry feature is an extension of the PI spec defined report status code. The feature is designed to collect critical (platform defined) status codes, record them into a HwErrRecord, and then transfer them through the Microsoft WHEA pipeline. From there an OEM can use Microsoft provided reports to check on in market device health. *Some work still pending completion.


Platform Runtime Mechanism (PRM)

Platform Runtime Mechanism (PRM) introduces the capability of moving certain classes of SMM code out of SMM and into a code module that executes within OS context. This feature adds the PRM infrastructure to the firmware that enables loading PRM modules which in turn are exposed to the OS for invocation. To accomplish this, a set of open source sample PRM modules are used to demonstrate the feature and show how additional modules can be added.


Trusted Platform Module (TPM)

QEMU TPM emulation implements a TPM TIS hardware interface that follows the Trusted Computing Group's TCG PC Client Specific TPM Interface Specification (TIS) in addition to a TPM CRB interface that follows the TCG PC Client Platform TPM Profile (PTP) Specification. QemuQ35Pkg has support to include TPM drivers and connect to the software TPM socket interface. Usage is covered in the detailed feature readme.


Trusted Platform Module (TPM) Replay

An OS and firmware developer feature that allows a custom crafted TPM event log to be created and replayed during boot. Any PCRs specified in the input TPM Replay event log are exclusively extended to the PCR (any other firmware measurements that would normally target the PCR are blocked). This feature can be useful to test a wide range of inputs to OS and firmware features dependent on TPM measurements


UEFI Memory Protections

UEFI Memory Protections add safety functionality such as page and pool guards, stack guard, and null pointer detection. The settings are split between MM and DXE environments for modularity.


Mu Customized Components


Modules Link to Documentation
QemuVideoDxe QEMU Cirrus Video Controller


Libraries Link to Documentation
MsPlatformDevicesLib MsPlatformDevicesLib
PlatformDebugLibIoPort PlatformDebugLibIoPort
PlatformThemeLib PlatformThemeLib