GoKawiilIntel to retire SGX after Diamond Rapids Xeons, shift focus to TDX
Intel announced it will discontinue support for Software Guard Extensions (SGX) on server platforms after its upcoming Xeon 'Diamond Rapids' CPUs, while continuing to support existing SGX deployments into the early 2030s. The company said it will instead expand Trust Domain Extensions (TDX), which secures entire virtual machines rather than isolated application enclaves, to meet growing confidential computing needs in cloud, enterprise, and AI workloads.
GoKawiil's interpretation of the reporting above, not reported fact.
TDX's VM-level isolation requires far less application rework than SGX's enclave model, which could make it easier for cloud providers to offer confidential computing at scale across many workloads simultaneously. Intel did not cite SGX's history of side-channel and attestation vulnerabilities as the reason for the change, suggesting the shift is driven more by market and architectural preferences than security failures. The move signals a broader industry trend toward securing whole virtual machines rather than individual application components.
- Intel will end SGX support after Diamond Rapids Xeon CPUs, with existing platforms supported into the early 2030s.
- TDX protects entire virtual machines, unlike SGX which isolates specific application enclaves requiring developer changes.
- Intel attributes the shift to industry preference for VM-level isolation, not to security vulnerabilities in SGX.
Source: tomshardware.com — Anton Shilov, 2026-10-12
Published there as: “Intel to phase out SGX after Xeon Diamond Rapids in favor of TDX”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.