> For the complete documentation index, see [llms.txt](https://docs.enclaive.cloud/buckypaper/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.enclaive.cloud/buckypaper/documentation/setup/bios-enablement/nvidia-cc.md).

# NVIDIA CC

{% hint style="info" %}
NVIDIA CC works together with:

* Advanced Micro Devices SEV-SNP
* Intel Corporation TDX

to provide **CPU + GPU confidential computing**.
{% endhint %}

NVIDIA Confidential Computing protects

* Prompts
* AI models
* Model weights
* Training data
* Inference pipelines
* GPU memory (HBM)
* PCIe communication paths

## Prerequisites

### Supported GPU

Confidential Computing requires:

* NVIDIA H100 (Hopper architecture)
* NVIDIA H200
* NVIDIA Blackwell (B200+)

{% hint style="warning" %}
Earlier GPUs (A100, V100) do NOT support full confidential computing mode.
{% endhint %}

### CPU Platform Requirements

You must enable:

* SEV-SNP (AMD platforms)\
  OR
* Intel TDX (Intel platforms)

GPU confidential computing requires a CPU TEE.

### Firmware & Software Requirements

You must update:

* Latest system BIOS
* Latest GPU firmware
* Latest BMC firmware
* Latest NVIDIA driver (R535+ typically)
* CUDA version supporting confidential mode

## Step-by-Step: Enable Confidential Computing in BIOS

{% hint style="warning" %}
BIOS menus differ by vendor.
{% endhint %}

### Step 1 — Enable CPU Trusted Execution Environment

Depending on your platform

#### AMD Platform

{% content-ref url="/pages/a7Reb6aqKLLt0oxymOfh" %}
[AMD SEV](/buckypaper/documentation/setup/bios-enablement/amd-sev.md)
{% endcontent-ref %}

#### Intel Platform

{% content-ref url="/pages/O6qmFrO8EcfcXoPwyhA1" %}
[Intel TDX](/buckypaper/documentation/setup/bios-enablement/intel-tdx.md)
{% endcontent-ref %}

### Step 2 — Enable IOMMU / DMA Protection

Navigate to

```
Advanced
  → PCIe Configuration
```

Enable

```
IOMMU → Enabled
DMA Protection → Enabled
Above 4G Decoding → Enabled
```

This is mandatory for GPU isolation.

### Step 3 — Enable SR-IOV (If Required)

If using GPU virtualization:

```
SR-IOV → Enabled
```

### Step 4 — Enable Secure Boot (Recommended)

```
Secure Boot → Enabled
```

Helps ensure driver integrity.

## Enable Confidential Mode on the GPU

After booting Linux:

### Step 1 — Install NVIDIA Driver

Verify driver

```bash
nvidia-smi
```

Driver must support confidential computing.

### Step 2 — Check Confidential Capability

```bash
nvidia-smi -q | grep Confidential
```

You should see

```bash
Confidential Compute Mode: Supported
```

### Step 3 — Enable Confidential Compute Mode

Some platforms require enabling CC mode

```bash
nvidia-smi -ccmode=1
```

Then reboot.

### Step 4 — Verify Confidential Mode

```bash
nvidia-smi -q | grep "Confidential Compute"
```

Expected

```bash
Confidential Compute Mode: Enabled
```

## Troubleshooting

| Problem                       | Cause               | Solution                 |
| ----------------------------- | ------------------- | ------------------------ |
| CC mode not supported         | Old driver          | Upgrade driver           |
| Cannot enable CC mode         | CPU TEE not enabled | Enable SEV-SNP or TDX    |
| GPU disappears after enabling | IOMMU misconfigured | Enable Above 4G decoding |
| Attestation fails             | Firmware outdated   | Update GPU firmware      |