Supported Technologies

As of now, there is no standard that defines the identity of workload, be it the identity of a VM, kubernetes node, or pod. Nitride implements a universal attestation profile, abstracting out the various attestation platform vendors and cloud service providers implement and provides a universal format.

By platform

Intel

• Intel Security Guard Extension (SGX) v2.0 available on Xeon 3rd generation

• Intel Trusted Domain Extension (TDX) v1.0 available on Xeon 5th generation

AMD

• AMD Secure Encrypted Virtualization with secure nested pages (SEV SNP) available on EPYC 3rd gen (Milan)

• AMD Secure Encrypted Virtualization with secure nested pages (SEV SNP) and Trusted IO available on EPYC 4rd gen (Genua)

ARM

ARM confidential compute architecture (CCA) available on Cortex A9

By hypervisor

KVM

• KVM/Qemu: virtualization on Linux kernel 6.11+

VMWare

• vSphere 8: Update 2 with SGX support

• vSphere 9: with SEV and TDX support (coming soon)

HyperV

• Hyper‑V Host: Windows Server 2022 or later (or Windows 11/Server 2022 with CoCo capabilities)