IOMMU must enabled in the BIOS and in the kernel.
About this task
Enter the following command to confirm that your system provides the necessary hardware
egrep '(vmx|svm)' --color=always /proc/cpuinfo | sort -u
If this command returns nothing, the processor does not support virtualization.
For more information on Intel processors, refer to: Does My Processor Support Intel® Virtualization Technology?
Confirm that VT-d is enabled in the BIOS.
Some system manufacturers disable these extensions by default. These extensions are listed in the BIOS by various names which differ from manufacturer to manufacturer. Consult your system manufacturer’s documentation for information on BIOS settings.
Activate IOMMU in the kernel.
Edit the file /etc/default/grub and add the following to the existing GRUB_CMDLINE_LINUX line.