Enabling Confidential Computing Throughout the Virtualization Stack

See the slides: https://drive.google.com/file/d/1Jj6q... Speaker: Nicolae Paladi Confidential Computing is maturing to address a growing number of security use cases in various domains, from critical infrastructure to banking & finance, telecom and automotive. Moreover, it continues to evolve new features such as secure time source, trusted IO, and others. Nonetheless various vendor implementations (AMD, ARM, Intel, NVIDIA) vary in the degree of support for confidential computing throughout the virtualisation stack. In this talk I will talk about our journey towards implementing support for confidential computing throughout the stack - from the virtualisation layer to guest operating systems, deployment and monitoring tooling, and much more. We will deep-dive to investigate the work of adding confidential computing support to Proxmox, an European open-source virtualisation manager. Moreover, we will also review the ongoing standardisation and governance work in this area.