Confidential Computing

Overview

Confidential computing is a security model in which the VM and the host mutually distrust each other, so the VM must be able to verify it is running on the expected, untampered hardware. In the NVMe virtual-SSD context this is a remaining gap that the standards work is addressing: NVMe is adding TDISP (TEE Device Interface Security Protocol) support and an NVMe interface report so that a confidential-computing VM can attest the storage device it has been assigned. As of October 2025 this support was still being defined, and it sits alongside related future work on better resource allocation across physical functions, SR-IOV virtual functions, and SIOV assignable interfaces.