Intel TDX

Intel Trust Domain Extensions (TDX) is a confidential-computing technology that isolates an entire virtual machine, called a Trust Domain, from the hypervisor and other host software.

Trust Domain attestation

A Trust Domain can produce an attestation quote describing its initial measurements, configuration, and platform security version. A remote verifier validates that quote and decides whether the VM satisfies the required policy.

TDX protects a VM-sized workload, while Intel SGX isolates selected application components inside enclaves. The appropriate model depends on how much of the software stack needs to run inside the trusted boundary.

Automata maintains a TDX attestation SDK and supports TDX quote verification through its DCAP stack.