Customer managed TCB with CVMs on Azure
summary
Azure offers a private‑preview Customizable/Custom Firmware CVM deployment that hands customers control of the guest TCB by letting them supply an open‑source Linux kernel + initrd, package a metadata archive, and choose integrity protection (dm‑verity/DM Integrity) and attestation/KMS. Tooling builds a vmgs firmware disk, embeds archive hashes into AMD identity blocks (family ID, image ID, launch digest), and creates the CVM; three demos show an integrity‑protected Ubuntu root, a self‑contained binary, and a container, with measurements matching on launch and only the final CVM creation step requiring cloud access.
AI-written summary · about
chapters (11)
- 0:00Introduction and speakers
- 1:09Talk overview and goals
- 2:57Confidential VMs in Azure
- 4:00Customizing confidential VMs
- 7:30Control versus convenience
- 8:13VMGS disk and direct Linux boot
- 13:08Trust flow and measurements
- 17:17Demo 1: Full OS deployment
- 19:48Demo 2: Self-contained app
- 25:48Demo 3: Container workload
- 28:22Conclusion and resources
related talks
13mVM Security with Confidential Computing
23mAMD SEV & Azure Local: When Confidential VMs Go Local
36mConfidential VMs in the cloud
28mProviding Confidential Guest Services with a Secure VM Service Module on AMD
40mDon’t Trust Opaque Clouds, Cryptographically Verify Instead!
20mCPC: Flexible, Secure, and Efficient CVM Maintenance with Confidential Procedure...
28mSecure bootloader for Confidential Computing
41mConfidential Computing, from host to workload