A method comprising: determining, by a secure interface control of a computer that prevents unauthorized accesses to locations in a memory of the computer, that a host absolute page (530, 370, 380) is not previously mapped to a virtual page (208, 520, 310, 320) in accordance with securing the host absolute page (530, 370, 380); and determining, by the secure interface control, that a host virtual page (208, 520, 310, 320) is not already mapped to an absolute page (530, 370, 380) in accordance with securing the host absolute page (530, 370, 380), wherein the secure interface control, at least after determining that the host absolute page (530, 370, 380) is not previously mapped to a virtual page (208, 520, 310, 320): locks the host absolute page (530, 370, 380) for use by the secure interface control; and marks the host absolute page (530, 370, 380) as secure, wherein the secure interface control, at least after determining that the host virtual page (208, 520, 310, 320) is not already mapped to a secure absolute page (530, 370, 380): registers the host virtual page (208, 520, 310) for use by the secure interface control, unlocks the host absolute page (530, 370, 380), securely decrypts the host absolute page (530, 370, 380), subsequently un-registers the host absolute page (530, 370, 380) for use by the secure interface control, and registers the host absolute page (530, 370, 380) to a secure domain, registers a host virtual address associated with the host absolute page (530, 370, 380) to create a host-address pair for use by a secure entity determining, by a secure interface control of a computer that prevents unauthorized accesses to locations in a memory of the computer, that a host absolute page (530, 370, 380) is not previously mapped to a virtual page (208, 520, 310, 320) in accordance with securing the host absolute page (530, 370, 380); and determining, by the secure interface control, that a host virtual page (208, 520, 310, 320) is not already mapped to an absolute page (530, 370, 380) in accordance with securing the host absolute page (530, 370, 380), wherein the secure interface control, at least after determining that the host absolute page (530, 370, 380) is not previously mapped to a virtual page (208, 520, 310, 320): locks the host absolute page (530, 370, 380) for use by the secure interface control; and marks the host absolute page (530, 370, 380) as secure, locks the host absolute page (530, 370, 380) for use by the secure interface control; and marks the host absolute page (530, 370, 380) as secure, wherein the secure interface control, at least after determining that the host virtual page (208, 520, 310, 320) is not already mapped to a secure absolute page (530, 370, 380): registers the host virtual page (208, 520, 310) for use by the secure interface control, unlocks the host absolute page (530, 370, 380), securely decrypts the host absolute page (530, 370, 380), subsequently un-registers the host absolute page (530, 370, 380) for use by the secure interface control, and registers the host absolute page (530, 370, 380) to a secure domain, registers a host virtual address associated with the host absolute page (530, 370, 380) to create a host-address pair for use by a secure entity