AMD SEV
Also written: SEV
AMD SEV encrypts virtual machine memory to protect data from unauthorized access, including the cloud provider.
AMD SEV, or Secure Encrypted Virtualization, is a security feature for cloud computing. It encrypts the memory of a virtual machine, making it unreadable to anyone who might try to access it without permission.
This is important because cloud providers manage the physical hardware where your virtual machines run. SEV ensures that even the cloud provider cannot see the data inside your virtual machine's memory, offering a higher level of privacy and security for sensitive workloads.
AMD Secure Encrypted Virtualization (SEV) is a hardware-based memory encryption technology designed to protect virtual machines (VMs) from unauthorized access. It encrypts the contents of a VM's memory using a dedicated per-VM encryption key managed by the AMD Secure Processor. This prevents the hypervisor, other VMs, or even the cloud provider's administrators from accessing the VM's memory in plaintext.
SEV offers different levels of protection, including SEV-ES (Encrypted State) which also encrypts CPU register state, and SEV-SNP (Secure Nested Paging) which adds integrity protection against memory tampering. The primary tradeoff is a slight performance overhead due to encryption/decryption, but it provides a strong security boundary for sensitive workloads running in untrusted cloud environments.
Microsoft Azure is using AMD confidential VMs, which leverage AMD SEV technology. This highlights the growing industry focus on confidential computing, where data is protected even while it is being processed in the cloud.
- Creating a more trustworthy cloud using AMD based confidential VMs on AzureMicrosoft · Microsoft Azure on YouTube ·
- Microsoft Copilot
- Microsoft Azure offers confidential virtual machines that utilize AMD SEV technology to enhance data security for cloud workloads.
- Full Disk Encryption
- Encrypts data at rest on storage devices, not data in memo
- TLS/SSL Encryption
- Encrypts data in transit over networks, not data in memory.
- Software-based Memory Encryption
- Relies on software to encrypt memory, which ca
AMD announced Secure Encrypted Virtualization (SEV) in 2016 as a feature for its EPYC server processors, aimed at enhancing cloud security. Source ↗
To see AMD SEV in action, you would typically need access to a cloud provider that offers confidential computing instances based on AMD EPYC processors, such as Microsoft Azure's confidential VMs. You could then deploy a sensitive workload within one of these specialized VMs to benefit from the hardware-level memory encryption.
The Playbook: reusable how-tos, prompts, configs and tips pulled out of the news.
- PromptRole-play a student struggling with math for AI tutor simulationSimulate a student's math struggles and uncertainty for AI tutor evaluation. · 5 min
- TemplateReusable workflow templates for healthcare teamsTeams can create and share templates for common workflows like documentation or prior authorizations. · 15 min
- TemplateTemplate for building an AI tool tailored to your workA structured approach to defining and building a custom AI tool for specific business needs. · 15 min
- TemplateEvals CSV prompt list for agent skillsA CSV file template for listing prompts used in evaluating agent skills. · 20 min
- HeuristicDouble coding agent task completion with docs linksProviding coding agents with a documentation link significantly increases their task completion rate. · 2 min
Questions people ask
- What is the main benefit of AMD SEV?
- The main benefit is enhanced security for virtual machines by encrypting their memory, protecting data from unauthorized access even by the cloud provider.
- Does AMD SEV protect against all threats?
- SEV provides strong protection against memory snooping by the hypervisor or cloud provider. However, it does not protect against all possible threats, such as vulnerabilities within the guest operating system itself.
First seen on Subvolts Jul 28, 2026. Updated Sep 15, 2026. Written by an AI model from the items above and reviewed against them weekly; report an error.