AMD SEV-SNP

AMD Secure Encrypted Virtualization–Secure Nested Paging (SEV-SNP) is a confidential-computing technology for virtual machines. It encrypts guest memory and adds integrity protections that help isolate a confidential VM from the hypervisor and other software on the host.

Attestation

An SEV-SNP guest can request a signed attestation report containing its launch measurement, security policy, platform version, and caller-supplied data. A TEE verifier checks that evidence against AMD's certificate chain and the policy required by the application.

Attestation proves properties of the launched environment; it does not prove that the application is bug-free or that every external service it uses is trustworthy.

Automata maintains an open-source AMD SEV-SNP attestation SDK for generating and verifying these reports.