Intel to phase out SGX after Xeon Diamond Rapids in favor of TDX

Intel has announced plans to discontinue support for its Software Guard Extensions (SGX) technology in favor of Trust Domain Extensions (TDX) for its upcoming Xeon Diamond Rapids CPUs. The company will continue to support existing SGX-enabled platforms into the early 2030s, but will expand TDX capabilities to address emerging cloud computing, enterprise workload, and agentic AI requirements.

While both SGX and TDX aim to protect sensitive information during processing, they employ different methods - SGX uses hardware-protected enclaves within applications, while TDX isolates entire virtual machines. This difference makes TDX more attractive to cloud service providers and customers seeking easier adoption. Intel's decision to phase out SGX is not driven by security concerns but rather by the industry's preference for VM-level isolation.

The company believes TDX offers scalability, ease of deployment, and the operational model necessary for wide-scale confidential computing. Intel will provide security updates and support for SGX-enabled platforms until the early 2030s, allowing customers ample time to switch to TDX for new deployments. In addition to TDX, Intel plans to introduce Trusted I/O, post-quantum cryptography, and enhanced attestation mechanisms.

These new features will help address data sovereignty, veracity of protected environments, and future security threats. Intel TDX is currently available through major cloud providers such as Alibaba Cloud, Google Cloud, IBM Cloud, Microsoft Azure, and Volcano Cloud, and is being integrated into software platforms by Red Hat, Canonical, and VMware for private clouds and enterprise environments.