Skip to content

Commit 4a3ebeb

Browse files
authored
Acrolinx
1 parent 28cdaa8 commit 4a3ebeb

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

articles/confidential-computing/confidential-vm-faq.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ sections:
2424
- Host attestation helps you verify the full health and compliance of the server before data processing begins.
2525
- Hardware Security Module (HSM) can be attached to guard the keys of confidential VM disks, which the tenant exclusively owns.
2626
- New UEFI boot architecture supporting the guest OS for enhanced security settings and capabilities.
27-
- A dedicated virtual Trusted Platform Module (TPM) certifies the health of the VM, provides hardened key management, and supports usecases such as BitLocker.
27+
- A dedicated virtual Trusted Platform Module (TPM) certifies the health of the VM, provides hardened key management, and supports use cases such as BitLocker.
2828
2929
- question: |
3030
Why should I use confidential VMs?
@@ -36,7 +36,7 @@ sections:
3636
- question: |
3737
What is AMD SEV-SNP, and how does it relate to Azure confidential VMs?
3838
answer: |
39-
SEV-SNP stands for Secure Encrypted Virtualization-Secure Nested Paging. It a Trusted Execution Environment (TEE) technology provided by AMD and offers multiple protections:
39+
SEV-SNP stands for Secure Encrypted Virtualization-Secure Nested Paging. It's a Trusted Execution Environment (TEE) technology provided by AMD and offers multiple protections:
4040
For example, memory encryption, unique CPU keys, encryption for the processor register state, integrity protection, firmware rollback prevention, side channel hardening, and restrictions on interrupt and exceptions behavior.
4141
Collectively, AMD SEV technologies harden guest protections to deny hypervisor and other host management code access to VM memory and state.
4242
Confidential VMs leverages AMD SEV-SNP with Azure technologies such as full-disk encryption and [Azure Key Vault Managed HSM](../key-vault/managed-hsm/overview.md).

0 commit comments

Comments
 (0)