Intel TDX on OpenMetal Large v4

Q: Does the OpenMetal Large v4 support Intel TDX confidential computing?

The Large v4 supports Intel TDX, but it requires a RAM upgrade to 1 TB (filling all 16 DIMM slots) to activate. TDX is not enabled in the base 512 GB configuration.

See bare metal pricing

Intel TDX (Trust Domain Extensions) creates hardware-isolated trust domains that encrypt VM memory with per-domain keys managed by the CPU’s Trust Domain Resource Manager. The hypervisor and host OS can schedule and manage trust domains but cannot read or modify their memory contents. This isolation is enforced by the CPU’s memory controller, not by software, so a compromised host cannot access tenant data.

The Large v4 ships with 8 of 16 DIMM slots populated. Upgrading to 1 TB by filling the remaining 8 slots is a customer-initiated change coordinated through the OpenMetal team. Once at 1 TB, TDX activates by default. Intel SGX (Software Guard Extensions) is available on the Large v4 regardless of RAM configuration, providing application-level encrypted enclaves for key management and sensitive computation. For servers that ship TDX-enabled out of the box without requiring a RAM upgrade, the XL v4 (1 TB), XXL v4 (2 TB), and XL v4 High Frequency (1 TB) all meet the threshold at their base configurations.