Enabling or disabling Trust Domain Extension (TDX)

Prerequisites

  • Processor Physical Addressing is Default.

  • Total Memory Encryption (TME) is Enabled.

  • Total Memory Encryption Multi-Key (TME-MK) is Enabled.

  • Intel(R) Software Guard Extensions (SGX) is Enabled.

Procedure

  1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration (RBSU) > Server Security > Intel Security Options > Trust Domain Extension (TDX).
  2. Select a setting:
    • Enabled
    • Disabled (Default)
  3. Save your setting.