Intel to retire SGX after Xeon Diamond Rapids, pivoting to TDX
Intel has announced that its upcoming Xeon "Diamond Rapids" will be the last generation to support Software Guard Extensions (SGX), after which the company will concentrate its confidential computing efforts on Trust Domain Extensions (TDX), according to Tom's Hardware. Existing SGX-enabled platforms will keep receiving security updates and support into the early 2030s, giving customers time to validate and migrate to TDX, which isolates entire virtual machines from the host and other VMs so existing workloads can be protected with minimal application changes. Intel also plans to expand TDX with TDX Connect trusted I/O, post-quantum cryptography and enhanced attestation, and says TDX can give multiple agents hardware-isolated VMs on shared infrastructure for agentic AI workloads.
It marks a shift in data-center confidential computing from application-level enclaves to VM-level isolation, with data sovereignty and agentic AI deployment needs shaping server security choices.