Intel Shifts Confidential Computing Strategy, Phasing Out SGX After ‘Diamond Rapids’ in Favor of TDX

Just five years after introducing its pioneering Software Guard Extensions (SGX) technology to its mainstream server platform, Intel announced plans on Friday to discontinue support for the architecture following its upcoming Xeon processors, codenamed "Diamond Rapids." Moving forward, the semiconductor giant intends to concentrate its comprehensive confidential computing efforts exclusively on its newer Trust Domain Extensions (TDX) architecture.

The decision marks a significant architectural pivot for Intel as it streamlines its hardware-based security offerings for data centers and enterprise environments. While the discontinuation of SGX represents the end of an era for application-level isolation, Intel has confirmed that it will continue to support existing SGX-enabled hardware platforms well into the early 2030s, ensuring stability and continuity for organizations that have already integrated the technology into their software stacks. Simultaneously, the company plans to aggressively expand the capabilities of TDX to address the rapidly evolving and demanding requirements of modern cloud computing, complex enterprise workloads, and emerging agentic AI applications.

Without a doubt, data sovereignty and privacy requirements have become increasingly critical factors for organizations across the globe. As enterprises increasingly migrate their core operations, data storage, and processing pipelines to third-party cloud service providers, they face mounting pressure to protect sensitive information from unauthorized access, malicious actors, and even the cloud operators themselves. Confidential computing has emerged as a vital pillar in addressing these concerns by securing data in use—protecting it through hardware-based encryption while it is actively being processed in memory.

Although both Intel SGX and TDX are fundamentally designed to protect sensitive information while it is being processed, they approach this critical security challenge using substantially different methodologies and architectural designs. SGX relies on the concept of secure enclaves, which allow developers to isolate specific application code and data in memory. This granular approach requires applications to be specifically refactored to take advantage of the enclave environment, providing protection at the process level. In contrast, TDX is designed to secure entire virtual machines from the underlying hypervisor and host system, offering a broader scope of protection that simplifies deployment for cloud service providers and enterprise customers alike without demanding extensive code rewrites for existing applications.

By consolidating its future roadmap around TDX, Intel aims to deliver a more scalable, flexible, and robust confidential computing framework capable of handling the massive scale of contemporary cloud deployments. As cloud architectures continue to evolve and the integration of artificial intelligence introduces new security paradigms, Intel’s strategic alignment behind TDX reflects a broader industry movement toward hardware-enforced isolation at the virtual machine and domain level. Organizations relying on Intel architecture will now look toward the upcoming Diamond Rapids generation and the broader rollout of TDX to secure their next-generation workloads as the tech industry transitions away from the SGX era over the coming decade.