Confidential VM

Confidential VMs on the IONOS CLOUD platform encrypt your Virtual Machine (VM) memory at the hardware level using AMD Secure Encrypted Virtualization with Secure Nested Paging (AMD SEV-SNP) technology.

Built for regulated industries that require cryptographic guarantees over contractual ones, this zero-trust architecture provides:

• Hardware-Level Isolation: Workloads run in a Trusted Execution Environment (TEE), ensuring the hypervisor sees only ciphertext.
• Exclusive Control: You retain complete control over your operating system, applications, encryption keys, and attestation policies.
• Immediate Availability: Directly available to all users in the Frankfurt-East de/fra/2 data center.

Important: Because Confidential VMs are designed to completely isolate your data from the underlying infrastructure, IONOS CLOUD has zero visibility into your encrypted environment. Consequently, our technical support is strictly limited by the product's design, and we cannot assist with in-guest operating system, application, or key management issues.

Follow step-by-step instructions in the following tutorial to deploy your confidential workloads:

Deploy a Confidential VM with SNPGuard

Deploy an attested Confidential VM on IONOS CLOUD using the SNPGuard open-source toolchain.