AMD Shares The Technical Details of Technology Powering Innovative Confidential Computing Leadership Cloud Offerings

SANTA CLARA, Calif., Aug. 30, 2023 (GLOBE NEWSWIRE) — Today, AMD (NASDAQ: AMD) announ­ced it has published the source code for AMD Secu­re Encrypt­ed Vir­tua­liza­ti­on (SEV) tech­no­lo­gy, the back­bone of AMD EPYC pro­ces­sor-based con­fi­den­ti­al com­pu­ting vir­tu­al machi­nes (VMs) available from cloud ser­vice pro­vi­ders inclu­ding Ama­zon Web Ser­vices (AWS), Goog­le Cloud, Micro­soft Azu­re and Ora­cle Com­pu­te Infra­struc­tu­re (OCI).

This release from AMD will dri­ve grea­ter trans­pa­ren­cy for the secu­ri­ty indus­try and pro­vi­de cus­to­mers the oppor­tu­ni­ty to tho­rough­ly review the tech­no­lo­gy behind con­fi­den­ti­al com­pu­ting VMs powered by AMD EPYC processors.

As a lea­der in con­fi­den­ti­al com­pu­ting, we are com­mit­ted to a relent­less pur­su­it of inno­va­ti­on and crea­ting modern secu­ri­ty fea­tures that com­ple­ment our eco­sys­tem part­ners’ most advan­ced cloud offe­rings,” said Mark Paper­mas­ter, exe­cu­ti­ve vice pre­si­dent and chief tech­no­lo­gy offi­cer, AMD. “By sha­ring the under­pin­nings of our SEV tech­no­lo­gy, we are deli­ve­ring trans­pa­ren­cy for con­fi­den­ti­al com­pu­ting and demons­t­ra­ting our dedi­ca­ti­on to open source. Invol­ving the open-source com­mu­ni­ty will fur­ther streng­then this cri­ti­cal tech­no­lo­gy for our part­ners and cus­to­mers who expect not­hing less than the utmost pro­tec­tion for their most valuable asset — their data.”

At Goog­le Cloud, we are mis­si­on-focu­sed on hel­ping cus­to­mers pro­tect their data throug­hout its enti­re life­cy­cle,” said Jeff Reed, VP, Cloud Secu­ri­ty, Goog­le Cloud. “As the first cloud ser­vice pro­vi­der to sup­port AMD’s encryp­ti­on in use capa­bi­li­ty, this release repres­ents ano­ther signi­fi­cant mile­stone in our long-stan­ding col­la­bo­ra­ti­on to enable trans­pa­rent, robust, con­fi­den­tia­li­ty of data in pro­cess at Goog­le Cloud.”

We applaud AMD’s decis­i­on to make por­ti­ons of their secu­ri­ty firm­ware available for public inspec­tion. This is total­ly in line with Azu­re con­fi­den­ti­al computing’s phi­lo­so­phy of embra­cing open source and open sourcing our own code whe­re prac­ti­cal.” Mark Rus­si­no­vich, Azu­re CTO and Tech­ni­cal Fel­low, Microsoft. 

Expan­ding Capa­bi­li­ties of Cloud Ser­vice Pro­vi­ders with AMD Processors
AMD EPYC pro­ces­sors offer world-class per­for­mance and modern secu­ri­ty fea­tures to guard data at rest, in moti­on and in use. The pro­ces­sors are at the heart of a gro­wing port­fo­lio of con­fi­den­ti­al com­pu­ting-enab­led VMs from major cloud ser­vice pro­vi­ders; giving cus­to­mers the assu­rance they need to move the sen­si­ti­ve workloads into the cloud. Using the AMD EPYC pro­ces­sors and the AMD Infi­ni­ty Guard suite of secu­ri­ty fea­tures, AMD con­ti­nues to be a lea­ding tech­no­lo­gy part­ner of choice for con­fi­den­ti­al com­pu­ting including:

  • AWS sup­port­ing AMD EPYC powered con­fi­den­ti­al com­pu­ting with SEV-SNP in the EC2 M6a, C6a and R6a instances.
  • Goog­le Cloud sup­ports Con­fi­den­ti­al Com­pu­ting with AMD EPYC pro­ces­sors in num­e­rous ways. This includes Con­fi­den­ti­al Spaces for pri­va­cy-focu­sed use cases such as joint data ana­ly­sis and machi­ne lear­ning model trai­ning; Gene­ral Avai­la­bi­li­ty of Con­fi­den­ti­al VMs and Con­fi­den­ti­al GKE as IAAS ser­vices, and con­fi­den­ti­al Dataf­low and Con­fi­den­ti­al Dataf­low based Ana­ly­tics solutions.
  • Micro­soft Azu­re using AMD EPYC pro­ces­sors to power mul­ti­ple con­fi­den­ti­al com­pu­ting ser­vices, inclu­ding con­fi­den­ti­al vir­tu­al machi­nes, con­fi­den­ti­al Azu­re Con­tai­ner ins­tances, con­fi­den­ti­al VM node pools for Azu­re Kuber­netes Ser­vice, Con­fi­den­ti­al VMs for SQL on Azu­re VMs, con­fi­den­ti­al VM clus­ter nodes for both Azu­re Dat­ab­ricks and Azu­re Data Explo­rer, and con­fi­den­ti­al VMs for Win­dows 11 Azu­re Vir­tu­al Desk­top. The­se ser­vices are desi­gned to offer hard­ware-based trus­ted exe­cu­ti­on envi­ron­ments lever­aging AMD SEV-SNP, which har­dens guest pro­tec­tions, hel­ping to guard against exter­nal thre­ats ope­ra­tor access.
  • Ora­cle Com­pu­te Infra­struc­tu­re (OCI) pro­vi­des its cus­to­mers a high assu­rance of data con­trol as cus­to­mers tran­si­ti­on their workloads to the cloud while deli­ve­ring the modern secu­ri­ty fea­tures and impres­si­ve per­for­mance of the EPYC CPU-powered of the OCI E3 and E4-based Con­fi­den­ti­al VMs.

Cus­to­mers Advan­cing Secu­ri­ty in the Public Cloud
Cus­to­mers, inclu­ding Astra­Ze­ne­ca and Mone­ta­Go, are demons­t­ra­ting robust adop­ti­on of AMD SEV tech­no­lo­gy to encrypt full sys­tem memo­ry and indi­vi­du­al VM memo­ry to expand their offe­rings for cus­to­mers. The modern data cen­ter requi­res workload opti­miza­ti­on and the AMD EPYC pro­ces­sor port­fo­lio pro­vi­des an all-in fea­ture set, with modern secu­ri­ty fea­tures, to power the opti­mi­zed com­pu­te infra­struc­tu­re for workloads that demand the hig­hest level of confidentiality.

Sup­port­ing Resources

About AMD
For more than 50 years AMD has dri­ven inno­va­ti­on in high-per­for­mance com­pu­ting, gra­phics and visua­liza­ti­on tech­no­lo­gies. Bil­li­ons of peo­p­le, lea­ding For­tu­ne 500 busi­nesses and cut­ting-edge sci­en­ti­fic rese­arch insti­tu­ti­ons around the world rely on AMD tech­no­lo­gy dai­ly to impro­ve how they live, work and play. AMD employees are focu­sed on buil­ding lea­der­ship high-per­for­mance and adap­ti­ve pro­ducts that push the boun­da­ries of what is pos­si­ble. For more infor­ma­ti­on about how AMD is enab­ling today and inspi­ring tomor­row, visit the AMD (NASDAQ: AMDweb­siteblogLin­ke­dIn and Twit­ter pages.

AMD, the AMD Arrow logo, EPYC, and com­bi­na­ti­ons the­reof are trade­marks of Advan­ced Micro Devices, Inc. Other names are for infor­ma­tio­nal pur­po­ses only and may be trade­marks of their respec­ti­ve owners.