Intel to Phase Out SGX After Xeon Diamond Rapids, Focus on TDX for Confidential Computing

Intel Shifts Confidential Computing Strategy

Intel plans to discontinue support for its Software Guard Extensions (SGX) technology after the upcoming Xeon 'Diamond Rapids' CPUs. The company will instead concentrate its confidential computing initiatives on Trust Domain Extensions (TDX). Existing SGX-enabled platforms will continue to be supported into the early 2030s.

SGX vs. TDX Approaches

SGX creates hardware-protected enclaves within applications to isolate specific code and data from other software, including the operating system and hypervisor. In contrast, TDX isolates entire virtual machines from the host environment, including the hypervisor and other VMs. This difference means SGX requires application modification, while TDX can protect existing workloads in confidential VMs without significant changes.

Reasons for the Transition

Intel's decision is driven by the industry's preference for VM-level isolation over application-specific enclaves. TDX provides scalability, ease of deployment, and an operational model better suited for widespread adoption of confidential computing, particularly for cloud service providers managing numerous virtual machines. Data sovereignty requirements are also a growing factor in protecting sensitive information processed on third-party infrastructure.

Future Support and Migration

The 'Diamond Rapids' generation will be the final Xeon CPUs to support SGX. This provides customers with several years to evaluate TDX-based solutions and migrate their existing applications. Intel will expand TDX capabilities to meet the evolving demands of cloud computing, enterprise workloads, and agentic AI applications.