Intel Shifts Confidential Computing Strategy
Just five years after bringing its Software Guard Extensions (SGX) technology to its mainstream server platform, Intel announced plans to discontinue support after its upcoming Xeon Diamond Rapids CPUs and concentrate its confidential computing efforts on Trust Domain Extensions (TDX). The company will continue to support existing SGX-enabled platforms into the early 2030s, while expanding TDX capabilities to address emerging requirements of cloud computing, enterprise workloads, and agentic AI applications.
Data sovereignty requirements are an increasingly important factor as organizations seek to protect sensitive information from unauthorized access even when processed on infrastructure operated by third parties. Although both Intel SGX and TDX protect sensitive information during processing, they use substantially different approaches.
SGX provides hardware-protected enclaves within applications to isolate selected code and data from other software, including the operating system and hypervisor. By contrast, TDX isolates entire virtual machines from the underlying host environment. While SGX requires developers to modify applications to use protected enclaves, TDX protects existing workloads inside confidential VMs without extensive changes, making it attractive to cloud service providers operating large numbers of virtual machines.
Security Vulnerabilities and Industry Adoption
Although both SGX and TDX have faced numerous security vulnerabilities over the years, including side-channel attacks and privilege-escalation flaws, Intel did not cite security concerns as the primary reason for discontinuing SGX.
Intel's decision reflects the industry preference for VM-level isolation over application-specific enclaves. According to Intel, TDX provides scalability, ease of deployment, and the operational model required for widespread confidential computing adoption. Diamond Rapids will be the final Xeon generation to support SGX, giving customers several years to validate alternative solutions based on TDX.
Future TDX Enhancements and Agentic AI
Intel plans to expand TDX capabilities with additional security technologies, including Intel TDX Connect for trusted I/O, post-quantum cryptography, and enhanced attestation mechanisms. Trusted I/O is important for workloads communicating with external devices, as protection inside a VM does not automatically extend to data transferred to peripherals or accelerators.
An important driver behind Intel's strategy is the accelerated adoption of agentic AI. Unlike conventional applications, autonomous agents access sensitive enterprise information and execute operations across multiple systems. TDX offers practical advantages for these workloads by protecting entire agent execution environments without extensive software modifications, enabling multiple agents to operate in separate, hardware-isolated VMs on shared infrastructure.
Intel TDX is already available through major cloud providers, including Alibaba Cloud, Google Cloud, IBM Cloud, Microsoft Azure, and Volcano Cloud. Red Hat, Canonical, and VMware are also adding TDX support to their platforms to enable adoption in private clouds and enterprise environments.
