AMD SEV-SNP
Also written: SEV-SNP
AMD SEV-SNP protects virtual machines from the host system using hardware encryption.
AMD SEV-SNP is a security technology for computer systems. It makes sure that the main computer system, called the hypervisor, cannot see or change the data inside a virtual computer. Think of it like a locked box for your virtual computer, where only the virtual computer itself can open and read its contents.
This is important for cloud computing. When you run a virtual computer on a cloud provider's hardware, you want to trust that the provider cannot access your sensitive information. SEV-SNP helps build that trust by encrypting the virtual computer's memory, making it unreadable to anyone outside of the virtual machine, including the cloud provider's software.
AMD Secure Encrypted Virtualization-Secure Nested Paging (SEV-SNP) is a hardware-based security feature for AMD EPYC processors. It provides memory encryption and integrity protection for virtual machines (VMs) against a potentially malicious or compromised hypervisor. SEV-SNP works by encrypting the VM's memory using a dedicated per-VM key and using a secure processor to manage these keys and enforce access controls. This prevents the hypervisor from reading or modifying the VM's memory contents, offering a strong attestation mechanism to verify the VM's integrity and execution environment.
Microsoft Copilot's use of Azure confidential computing highlights the growing importance of hardware-level security for AI workloads. Protecting sensitive data and models running in the cloud is crucial for regulated industries and enterprise adoption, making technologies like AMD SEV-SNP increasingly relevant.
- Azure confidential computing for sovereign and regulated workloadsMicrosoft · Microsoft Azure on YouTube ·
- Microsoft Copilot
- Microsoft Copilot leverages Azure confidential computing, which utilizes hardware security features like AMD SEV-SNP to protect sensitive workloads in the cloud.
AMD SEV-SNP is an evolution of AMD's Secure Encrypted Virtualization (SEV) technology, first introduced in their EPYC processors. SEV-SNP was announced to enhance security by adding memory integrity protection and stronger attestation capabilities. Source ↗
While directly configuring SEV-SNP requires specific cloud provider offerings and VM setup, you can explore confidential computing options on major cloud platforms like Azure, Google Cloud, or AWS. Look for services that advertise confidential VMs or secure enclaves to understand how cloud providers are implementing hardware-based security for sensitive workloads.
The Playbook: reusable how-tos, prompts, configs and tips pulled out of the news.
- PromptRole-play a student struggling with math for AI tutor simulationSimulate a student's math struggles and uncertainty for AI tutor evaluation. · 5 min
- TemplateReusable workflow templates for healthcare teamsTeams can create and share templates for common workflows like documentation or prior authorizations. · 15 min
- TemplateTemplate for building an AI tool tailored to your workA structured approach to defining and building a custom AI tool for specific business needs. · 15 min
- TemplateEvals CSV prompt list for agent skillsA CSV file template for listing prompts used in evaluating agent skills. · 20 min
- HeuristicDouble coding agent task completion with docs linksProviding coding agents with a documentation link significantly increases their task completion rate. · 2 min
Questions people ask
- What is the main benefit of AMD SEV-SNP?
- The main benefit is protecting virtual machines from the underlying host system, ensuring that the cloud provider or hypervisor cannot access or tamper with the VM's data and code.
- Does SEV-SNP protect against all threats?
- SEV-SNP provides strong protection against hypervisor-level threats and unauthorized memory access. However, it does not protect against vulnerabilities within the guest operating system or applications running inside the VM.
First seen on Subvolts Jul 28, 2026. Updated Sep 15, 2026. Written by an AI model from the items above and reviewed against them weekly; report an error.