Azure / Azure/AKS

[Feature Request] Confidential VM sizes with Intel TDX

Open
#5,618 2 comments 2 reactions 1 assignee Claimed by @allyford View on GitHub
feature-request known-issue
Dominant language
TypeScript
Stars
2.1k
Forks
395
Avg merge
2d 22h
Merged PRs (30d)
13

Description

Confidential VMs on AKS have two options for Trusted Execution Environment (TEE) from both AMD and Intel. These TEEs allow you to create Confidential VM environments with excellent price-to-performance ratios, all without requiring any code changes.

- For AMD-based Confidential VMs, the technology used is [AMD SEV-SNP](https://www.amd.com/system/files/TechDocs/SEV-SNP-strengthening-vm-isolation-with-integrity-protection-and-more.pdf), which was introduced with 3rd Gen AMD EPYC™ processors.
- Intel-based Confidential VMs utilize [Intel TDX](https://cdrdv2-public.intel.com/690419/TDX-Whitepaper-February2022.pdf), a technology introduced with 5th Gen Intel® Xeon® processors.

Known issue: Creating nodepools with Confidential VM sizes that utilize Intel TDX results in the following error:
```
The VM size 'Standard_DC2es_v6' is not supported for creation of VMs and Virtual Machine Scale Set with '' security type.
```

Intel TDX VM sizes include:

Image

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.