Supporting Intel(r) SGX on Multi-Package Platforms

TL;DR

This paper discusses necessary platform enhancements to support Intel SGX on multi-package cloud platforms, enabling scalable, performant, and secure trusted execution environments for cloud computing.

Contribution

It introduces new platform modifications to extend Intel SGX support to multi-package systems, facilitating confidential cloud computing at scale.

Findings

Proposes platform enhancements for multi-package SGX support

Demonstrates improved scalability and security in cloud environments

Enables user-programmable trusted execution environments

Abstract

Intel(r) Software Guard Extensions (SGX) was originally released on client platforms and later extended to single socket server platforms. As developers have become familiar with the capabilities of the technology, the applicability of this capability in the cloud has been tested. Various Cloud Service Providers (CSPs) are demonstrating the value of using SGX based Trusted Execution Environments (TEE) to create a new paradigm of Confidential Cloud Computing. This paper describes the additional platform enhancements we believe are necessary to deliver a user programmable Trusted Execution Environment that scales to cloud usages, performs and is secure on multi-package platforms.