Live migration is generally available (GA) on Confidential VM instances that meet the following configuration criteria:

• A C3D machine type

• AMD SEV Confidential Computing technology

• An operating system image that supports live migration

A vulnerability affecting Intel TDX firmware was discovered and is being addressed. For more information, see the GCP-2026-008 security bulletin.

Following a firmware update, Confidential VM instances with AMD SEV-SNP generate v4 attestation reports. Attestation report parsers that are designed for v3 attestation reports might break.

Customers using go-sev-guest to parse attestation reports can resolve attestation failures by updating to go-sev-guest v0.14.0 or above.

If you're writing your own parser, the attestation report format is defined by the SEV Secure Nested Paging Firmware ABI Specification.

A vulnerability affecting AMD Zen 5 processors (Turin) was discovered and is being addressed. For more information, see the GCP-2025-058 security bulletin.

Support for accelerator-optimized a3-highgpu-1g machine type for securely running AI and ML workloads is now generally available, with the following specifications:

• 4th Generation Intel Xeon Scalable processor (Sapphire Rapids)
• Intel TDX
• 1 NVIDIA H100 GPU

As of June 20, 2025, Confidential VM instances using AMD SEV-SNP or Intel TDX do not support remote attestation when running the following guest OS images:

• SLES 15 SP7

• Ubuntu 25.04

To restore remote attestation, use an earlier guest OS version such as SLES 15 SP6 or Ubuntu 24.04.

Support for general purpose C4D machine types is now generally available, featuring:

• 5th generation AMD EPYC processors (Turin) and Google Titanium

• AMD Secure Encrypted Virtualization (SEV) which can encrypt the memory of the VM to protect data in-use

Support for accelerator-optimized a3-highgpu-1g machine type for securely running AI and ML workloads is now available in Preview, with the following specifications:

• 4th Generation Intel Xeon Scalable processor (Sapphire Rapids)
• Intel TDX
• 1 NVIDIA H100 GPU

On February 18, 2025, Google released a security fix for Confidential VM instances using AMD SEV-SNP on N2D machine types, which might result in performance degradation. The extent of the performance impact varies depending on the specific workload.

Support for Intel TDX on c3-standard-* machine types is now released to General Availability.

Support for AMD SEV on C3D machine types is now released to General Availability.

AMD has notified Google about 3 new (2 medium risk, 1 high risk) firmware vulnerabilities affecting SEV-SNP in AMD EPYC 3rd generation (Milan) and 4th generation (Genoa) CPUs (CVE-2023-31355, CVE-2024-21978, and CVE-2024-21980).

For more information, see the GCP-2024-046 security bulletin.

Support for AMD SEV-SNP on Confidential VM instances is now generally available. AMD SEV-SNP is supported on N2D machine types with AMD EPYC Milan CPU platforms.

Support for Intel TDX on general purpose C3 standard machine types is now available in Preview .

Live migration is now generally available on new Confidential VM instances that meet the following configuration criteria:

• An N2D machine type with AMD EPYC Milan CPU platform

• AMD SEV Confidential Computing technology

• An operating system image that supports live migration

Support for AMD SEV-SNP on general purpose N2D machine types is now available in Preview .

Support for compute-optimized C2D machine types is now generally available, featuring:

• 3rd generation AMD EPYC Milan processors
• AMD Secure Encrypted Virtualization (SEV) which can encrypt the memory of the VM to protect data in-use
• Large VM sizes
• Optimized for high-performance computing (HPC)

Feature

Support for 3rd generation AMD EPYC Milan processors on general purpose N2D machine types is now generally available, featuring:

• AMD Secure Encrypted Virtualization (SEV) which can encrypt the memory of the VM to protect data in-use

Support for 3rd generation AMD EPYC Milan processors on general purpose N2D machine types is now available in Preview, featuring:

• AMD Secure Encrypted Virtualization (SEV) which can encrypt the memory of the VM to protect data in-use

Feature

Support for compute-optimized C2D machine types is now available in Preview, featuring:

• 3rd generation AMD EPYC Milan processors
• AMD Secure Encrypted Virtualization (SEV) which can encrypt the memory of the VM to protect data in-use
• Large VM sizes
• Optimized for high-performance computing (HPC)

Confidential VM is now generally available on general purpose N2D machine types, which feature:

• 2nd generation AMD EPYC Rome processors
• AMD Secure Encrypted Virtualization (SEV) which can encrypt the memory of the VM to protect data in-use

Confidential VM is now available in Beta on general purpose N2D machine types, which feature:

• 2nd generation AMD EPYC Rome processors
• AMD Secure Encrypted Virtualization (SEV) which can encrypt the memory of the VM to protect data in-use