Google Cloud Blog
Follow
From clicks to clusters: Expanding Confidential Computing with Intel TDX
Google Cloud has significantly expanded its Confidential Computing offerings, enhancing data security during processing. Confidential Virtual Machines (VMs) with Intel Trust Domain Extensions (TDX) are now more widely available across numerous regions and zones. This technology isolates sensitive workloads in hardware-based Trusted Execution Environments (TEEs).Confidential GKE Nodes, built on Confidential VMs, now support Intel TDX for Google Kubernetes Engine clusters and node pools. Confidential Space, also enhanced with Intel TDX, provides robust solutions for insider threats and multi-party collaboration. This expansion allows for more secure joint machine learning and private generative AI inference.Additionally, Confidential VMs and Confidential GKE Nodes now feature NVIDIA H100 GPUs, enabling secure processing for data-intensive AI and ML workloads. These offerings are generally available, extending hardware-based protections to GPUs. Intel is also offering a free tier for its attestation verifier service, Intel Tiber Trust Authority, making secure attestation more accessible.Customers are leveraging these advancements for diverse applications, from secure AI collaboration to protecting sensitive financial data. The new interfaces and expanded availability simplify the adoption of Confidential Computing for a wider range of users. These developments strengthen a critical security gap, ensuring data privacy even while in use within the public cloud.