Platform: Intel TDX¶

Intel TDX (Trust Domain Extensions) provides hardware-isolated Trust Domains (TDs) — VMs with encrypted memory, isolated register state, and hardware-signed attestation. TRACE Level 2 on TDX is supported on GCP Confidential VM (N2D-TDX) and select on-premises Intel Xeon Scalable deployments.

What Intel TDX provides¶

TRACE fields populated by TDX¶

{
  "runtime": {
    "platform": "intel-tdx",
    "measurement": "sha384:a1b2c3d4e5f6a7b8...",
    "rim_uri": "https://api.trustedservices.intel.com/tdx/certification/v4/",
    "firmware_version": "5.35.1",
    "nonce": "dGRhY2Uzz..."
  }
}

• measurement — SHA-384 of the TDX TD Quote's MRTD field
• rim_uri — Intel Trust Authority / PCCS URL for TDX certificate chain
• firmware_version — TDX firmware version from the TD Quote header

Verification flow¶

agentrust-trace verify-hardware session.trace.json \
  --platform intel-tdx \
  --check-rim

The verifier: 1. Fetches the TDX certificate chain from Intel's PCCS or Trust Authority 2. Verifies the TD Quote using Intel's SGX QVL (Quote Verification Library) 3. Compares runtime.measurement against the TD Quote MRTD 4. Validates that cnf.jwk was generated inside the TD at that measurement

Supported cloud instances¶

On-premises deployment¶

For on-premises Intel TDX (e.g., Supermicro SYS-121H with Xeon Scalable 4th Gen), the cMCP gateway runs as a TD and uses Intel's PCCS (Platform Certificate Caching Service) or the Intel Trust Authority for attestation verification. No cloud dependency is required — deploy PCCS locally to air-gap the attestation path. See agentrust-io/cmcp for the Helm chart.

# cmcp.yaml (on-premises TDX)
attestation:
  platform: intel-tdx
  pccs_url: https://pccs.internal.example.org:8081  # your local PCCS
  rim_cache: /var/cache/trace/rims

Example record¶

See examples/intel-tdx.json.