AMD SEV & Azure Local: When Confidential VMs Go Local
summary
Claim: AMD SEV plus Azure Local bring cloud-grade confidential VMs to on‑prem, edge, sovereign and disconnected sites using SEV‑SNP on Genoa EPYC and a deployable Azure Local platform. Implementation uses immutable OS images with DM‑Verity root hash, measured boot PCRs (PCR4, PCR11), vTPM binding, attestation and an external relying party for key release. Demo completes attestation and then allows model/data download; CVM private preview is available on validated OEM hardware (Lenovo, HPE, Prime Line) and offline attestation is planned.
AI-written summary · about
chapters (12)
- 0:00Confidential VMs in local
- 1:07AMD SEV and Azure Local
- 3:59Why AMD SEV matters
- 5:42What is Azure Local
- 8:06Disconnected security
- 9:29Trustworthy CVMs on Azure
- 10:53Secure provisioning in CVMs
- 13:21Runtime enforcement and validation
- 15:07Demo: CVM attestation
- 17:45Summary and future
- 18:52Access Azure Local with SEV
- 19:55Q&A on isolation
related talks
13mVM Security with Confidential Computing
12mUsing AMD based confidential VMs for your Azure Data Explorer clusters
46mAMD + Azure: Outstanding performance and the latest security features
36mCTO Panel: The Impact of Confidential Computing with Intel, Azure, AMD & NVIDIA
40mDon’t Trust Opaque Clouds, Cryptographically Verify Instead!
36mConfidential VMs in the cloud
15mRemote Attestation in AMD SEV-SNP Confidential VMs
17mLessons learned: scaling confidential clusters on OpenStack