Intel will end SGX support after Diamond Rapids and shift to TDX
Intel will keep SGX systems supported into the early 2030s while moving its confidential-computing roadmap to TDX.
Intel says Xeon Diamond Rapids will be the last server CPU generation to support Software Guard Extensions, and that it will shift its confidential-computing push toward Trust Domain Extensions instead. Existing SGX systems will keep getting support into the early 2030s, giving customers time to move workloads to TDX-based alternatives. The company is positioning TDX as the easier fit for cloud and enterprise deployments because it protects whole virtual machines rather than requiring application changes for enclaves. Intel also plans to add TDX Connect for trusted I/O, along with post-quantum cryptography and stronger attestation, but it has not given release dates for those features. TDX is already offered by Alibaba Cloud, Google Cloud, IBM Cloud, Microsoft Azure, and Volcano Cloud, and it is being added by Red Hat, Canonical, and VMware.
Why it matters
For companies running protected workloads, the change signals a longer-term move away from SGX enclaves and toward whole-VM protection with TDX. That gives existing users a runway to plan migrations, while cloud and virtualization stacks around TDX are already broadening support.
Keep or strike?
Does this story matter, or is it hype? Mark it before you see what everyone else did.
Sources
- Tom's Hardware