Microsoft, Google Announce Wider Availability of Secure VMs

Microsoft this week announced the general availability of DCsv2-series virtual machines (VMs), and Google informed customers that Shielded VM is now the default for Google Compute Engine users.

Microsoft has announced the general availability of DCsv2-series VMs for Azure customers in three regions, with plans to expand the offer to other regions before the end of the year.

DCsv2 VMs, part of the Azure confidential computing offering, are designed to allow customers to protect data while it’s being processed by running on servers that implement a hardware-based trusted execution environment (TEE) that uses Intel’s Software Guard Extensions (SGX).

“Traditionally, applications are protected while at rest and in transit. Now, you can deliver applications that protect data while in use. This enables a new set of scenarios like multiparty sharing, where it’s possible to combine data from multiple companies to run machine learning models without the companies getting access to each other’s data,” Microsoft explained.

Google, on the other hand, announced that its Unified Extensible Firmware Interface (UEFI) and Shielded VM are enabled by default for everyone using its Compute Engine, at no additional cost.

Shielded VM is a hardened virtual machine instance that ensures the VM runs a verified bootloader and kernel when it boots. This can help protect organizations against various threats, such as malicious guest OS firmware, boot and kernel vulnerabilities, and malicious insiders.

Shielded VM became generally available in April 2019 and Google has now enabled it by default for everyone.

“At this time we want to be especially mindful of the many challenges organizations ..

Support the originator by clicking the read the rest link below.