Azure confidential computing
Azure confidential computing offers solutions to isolate sensitive data while it is being processed. Explore AMD SEV-SNP and Intel TDX VMs, confidential containers, and first-party services, with specialized Intel SGX application enclaves for enclave-specific workloads.
Azure confidential computing
Overview
- Explore Azure confidential computing products
- What is confidential computing?
- What can I use this for?
- Browse Azure confidential computing code examples
Quickstart
- Compare Azure confidential computing products
- Build confidential computing solutions
- Deploy confidential computing solutions
- Explore cleanroom solutions
- Azure confidential computing code samples
Concept
- Trusted Hardware Identity Management
- Trusted launch
- Azure SQL Always Encrypted in secure enclaves
- Azure IoT Edge
What's new
Confidential Virtual Machines
Overview
Concept
Quickstart
- Create confidential VM in the Azure portal
- Create confidential VM with ARM template
- Create confidential VM with Azure CLI
- Create VMSS with Confidential Disk Encryption
How-To Guide
- Use sample app for guest attestation
- Create a custom image for a confidential VM
- Deploy a virtual machine scale set using hardened image
Reference
- Confidential VMs FAQ
- DCasv5 and DCadsv5-series VM specs
- ECasv5 and ECadsv5-series VM specs
- DCesv6-series VM specs
- ECesv6-series VM specs
- Availability
What's new
Container compute
Overview
- Confidential containers on Azure overview
- Confidential VM with AMD SEV-SNP node pools in AKS
- App enclave nodes with Intel SGX in AKS (specialized)
Quickstart
- Hello world with Confidential containers with Azure Container Instances (ACI)
- Confidential VM node pools on AKS
- CLI-based provisioning for enclave container apps on AKS (specialized)
- Confidential containers with Intel SGX quickstart (specialized)
- App enclave-aware container samples (specialized)
Reference
- Azure architecture center confidential container scenarios
- Confidential container samples (legacy repository)
- Azure confidential computing code samples (consolidated repository)
- Intel SGX based VM nodes on AKS FAQ (specialized)
video
- Confidential VM worker nodes with AKS with remote attestation - Azure Friday
- Overview of confidential computing Intel SGX nodes on AKS (specialized)
- Python hello world demo with Intel SGX-based confidential containers on AKS (specialized)
- Confidential big data analytics with Apache Spark in enclaves (specialized)
What's new
Confidential services
Overview
Quickstart
- Deploy Azure Container Apps on confidential compute
- Create an Azure Event Hubs Dedicated namespace with confidential computing
- Create an Azure Service Bus Premium namespace with confidential computing
- Create an Azure AI Search service with confidential computing
- Deploy Azure Database for PostgreSQL on confidential compute
- Deploy Azure Virtual Desktop on confidential VMs
- Create and activate an Azure Key Vault Managed HSM
Application enclaves on VMs (Intel SGX, specialized)
Overview
Quickstart
- Create Intel SGX VM in the Azure portal (specialized)
- Create Intel SGX VM in the Azure Marketplace (specialized)