Intel plans to discontinue SGX after the Xeon Diamond Rapids generation, focusing on TDX to meet cloud and enterprise security requirements.

Just five years after bringing its Software Guard Extensions (SGX) technology to its mainstream server platform, Intel on Friday announced plans to discontinue support for SGX after its upcoming Xeon "Diamond Rapids" CPUs and concentrate its confidential computing efforts on Trust Domain Extensions (TDX). The company will continue to support existing SGX-enabled platforms into the early 2030s, while expanding TDX capabilities to address emerging requirements of cloud computing, enterprise workloads, and agentic AI applications.

Data sovereignty requirements are an increasingly important factor as organizations seek to protect sensitive information from unauthorized access, even when they process it on infrastructure operated by third parties. Although both Intel SGX and TDX are designed to protect sensitive information while it is being processed, they use substantially different approaches.

SGX provides hardware-protected enclaves within applications to isolate selected code and data from other software, including the operating system and hypervisor. By contrast, TDX isolates entire virtual machines from the underlying host environment, including the hypervisor and other VMs. While SGX requires developers to design or modify applications to use protected enclaves, TDX can protect existing workloads inside confidential VMs without extensive changes to individual applications. This makes TDX particularly attractive to cloud service providers that operate large numbers of virtual machines.

Both SGX and TDX have faced numerous security vulnerabilities over the years, including side-channel attacks, privilege-escalation flaws, and attacks against their attestation mechanisms. Intel, however, does not cite security concerns as a reason for its decision to discontinue SGX.

Intel's decision reflects the industry's preference for VM-level isolation over application-specific enclaves. According to Intel, TDX provides the scalability, ease of deployment, and operational model required for widespread adoption of confidential computing. Although SGX enabled confidential computing in the data center and continues to serve security-conscious customers, Intel believes future demand will favor TDX. Diamond Rapids will therefore be the final Xeon generation to support SGX, giving customers several years to validate TDX-based alternatives and migrate existing applications. Intel will continue to provide security updates and support for SGX-enabled platforms into the early 2030s, so customers will have ample time to adopt TDX for new deployments.

Meanwhile, Intel plans to expand TDX with additional security technologies. These include Intel TDX Connect, designed to enable trusted I/O, as well as post-quantum cryptography and enhanced attestation mechanisms. Trusted I/O is particularly important for workloads that communicate with external devices, because protection of computations inside a virtual machine does not necessarily extend to data transferred between the VM and accelerators or other peripherals, such as CXL expanders (though Intel has not stated this explicitly). Improved attestation will help organizations verify the integrity of protected environments, while post-quantum cryptography will help address future security threats. Intel has not disclosed specific availability dates for these enhancements.

One important driver behind Intel's confidential computing strategy appears to be the accelerated adoption of agentic AI. Unlike conventional applications, autonomous agents may access sensitive enterprise information, execute operations across multiple systems, and interact with other agents. Intel expects many such workloads to run on CPUs, and TDX may offer practical advantages for agentic AI applications. Unlike SGX, TDX can protect entire agent execution environments without extensive software modifications, and it enables multiple agents to operate in separate, hardware-isolated VMs on shared infrastructure. For GPU-accelerated AI workloads, Intel is working with Nvidia to coordinate confidential computing technologies across CPUs and GPUs, extending protection to sensitive data and AI models throughout the processing pipeline. That scope is obviously broader than Intel's development of custom Xeon CPUs for Nvidia.

Intel TDX is already available through major cloud providers, including Alibaba Cloud, Google Cloud, IBM Cloud, Microsoft Azure, and Volcano Cloud. Meanwhile, Red Hat, Canonical, and VMware are adding TDX support to their software platforms to enable adoption in private clouds and enterprise environments.