Skip to content

Commit f1bb7ce

Browse files
Merge pull request #311455 from simranparkhe/patch-15
Update Intel TDX processor generation and VM sizes
2 parents 5451b0a + f2f1d90 commit f1bb7ce

1 file changed

Lines changed: 7 additions & 7 deletions

File tree

articles/confidential-computing/virtual-machine-options.md

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ ms.date: 11/15/2023
1515

1616
Azure offers a choice of Trusted Execution Environment (TEE) options from both AMD and Intel. These TEEs allow you to create Confidential VM environments with excellent price-to-performance ratios, all without requiring any code changes.
1717

18-
For AMD-based Confidential VMs, the technology used is [AMD SEV-SNP](https://www.amd.com/system/files/TechDocs/SEV-SNP-strengthening-vm-isolation-with-integrity-protection-and-more.pdf), which was introduced with 3rd Gen AMD EPYC™ processors. On the other hand, Intel-based Confidential VMs utilize [Intel TDX](https://cdrdv2-public.intel.com/690419/TDX-Whitepaper-February2022.pdf), a technology introduced with 4th Gen Intel® Xeon® processors. Both technologies have different implementations, however both provide similar protections from the cloud infrastructure stack.
18+
For AMD-based Confidential VMs, the technology used is [AMD SEV-SNP](https://www.amd.com/system/files/TechDocs/SEV-SNP-strengthening-vm-isolation-with-integrity-protection-and-more.pdf), which was introduced with 3rd Gen AMD EPYC™ processors. On the other hand, Intel-based Confidential VMs utilize [Intel TDX](https://cdrdv2-public.intel.com/690419/TDX-Whitepaper-February2022.pdf), a technology introduced with 5th Gen Intel® Xeon® processors. Both technologies have different implementations, however both provide similar protections from the cloud infrastructure stack.
1919

2020
## Sizes
2121

@@ -31,10 +31,10 @@ We offer the following VM sizes:
3131
| **DCadsv6-series** | AMD SEV-SNP | General purpose CVM with local temporary disk. |
3232
| **ECasv6-series** | AMD SEV-SNP | Memory-optimized CVM with remote storage. No local temporary disk. |
3333
| **ECadsv6-series** | AMD SEV-SNP | Memory-optimized CVM with local temporary disk. |
34-
| **DCesv5-series** | Intel TDX | General purpose CVM with remote storage. No local temporary disk. |
35-
| **DCedsv5-series** | Intel TDX | General purpose CVM with local temporary disk. |
36-
| **ECesv5-series** | Intel TDX | Memory-optimized CVM with remote storage. No local temporary disk. |
37-
| **ECedsv5-series** | Intel TDX | Memory-optimized CVM with local temporary disk. |
34+
| **DCesv6-series** | Intel TDX | General purpose CVM with remote storage. No local temporary disk. |
35+
| **DCedsv6-series** | Intel TDX | General purpose CVM with local temporary disk. |
36+
| **ECesv6-series** | Intel TDX | Memory-optimized CVM with remote storage. No local temporary disk. |
37+
| **ECedsv6-series** | Intel TDX | Memory-optimized CVM with local temporary disk. |
3838
| **NCCadsH100v5-series** | AMD SEV-SNP and NVIDIA H100 Tensor Core GPUs | CVM with Confidential GPU. |
3939

4040
> [!NOTE]
@@ -88,7 +88,7 @@ For availability information, see which [VM products are available by Azure regi
8888

8989
### Resizing
9090

91-
Confidential VMs run on specialized hardware, so you can only [resize confidential VM instances](confidential-vm-faq.yml#can-i-convert-a-dcasv5-ecasv5-cvm-into-a-dcesv5-ecesv5-cvm-or-a-dcesv5-ecesv5-cvm-into-a-dcasv5-ecasv5-cvm-) to other confidential sizes in the same region. For example, if you have a DCasv5-series VM, you can resize to another DCasv5-series instance or a DCesv5-series instance.
91+
Confidential VMs run on specialized hardware, so you can only [resize confidential VM instances](confidential-vm-faq.yml#can-i-convert-a-dcasv5-ecasv5-cvm-into-a-dcesv5-ecesv5-cvm-or-a-dcesv5-ecesv5-cvm-into-a-dcasv5-ecasv5-cvm-) to other confidential sizes in the same region. For example, if you have a DCasv5-series VM, you can resize to another DCasv5-series instance or a DCesv6-series instance.
9292

9393
It's not possible to resize a non-confidential VM to a confidential VM.
9494

@@ -108,7 +108,7 @@ Make sure to specify the following properties for your VM in the parameters sect
108108

109109
- VM size (`vmSize`). Choose from the different [confidential VM families and sizes](#sizes).
110110
- OS image name (`osImageName`). Choose from the qualified OS images.
111-
- Disk encryption type (`securityType`). Choose from VMGS-only encryption (`VMGuestStateOnly`) or full OS disk pre-encryption (`DiskWithVMGuestState`), which might result in longer provisioning times. For Intel TDX instances only we also support another security type (`NonPersistedTPM`) which has no VMGS or OS disk encryption.
111+
- Disk encryption type (`securityType`). Choose from VMGS-only encryption (`VMGuestStateOnly`) or full OS disk pre-encryption (`DiskWithVMGuestState`), which might result in longer provisioning times.
112112

113113
## Next steps
114114

0 commit comments

Comments
 (0)