Bare Metal Server — XL v4 TDX Edition — 5th Gen Intel Xeon Gold 6530, 1TB DDR5, Intel TDX Enabled

Recommended Workloads

Regulated financial data processing

Algorithmic trading systems, risk calculation engines, and financial record processing that must isolate computation from the infrastructure operator benefit from TDX’s hardware attestation and memory encryption. Audit trails can include attestation reports confirming that calculations occurred inside a verified Trust Domain. Fixed monthly pricing eliminates the variable cost exposure that makes public cloud financial workloads difficult to budget.

Healthcare PHI processing and inference

Electronic health records, medical imaging pipelines, and clinical ML inference running inside TDX Trust Domains satisfy the technical safeguard requirements for PHI handling. OpenMetal’s HIPAA BAA covers the infrastructure layer; TDX provides the hardware isolation that prevents PHI from being accessible to the host OS or adjacent processes. CPU-based inference with AMX eliminates the need to push PHI to a GPU — a significant attack surface reduction for confidential medical AI pipelines.

Multi-tenant SaaS isolation

SaaS providers running multiple customer workloads on a single physical server can use TDX to provide contractual hardware isolation between tenants. Each customer’s application runs in a separate Trust Domain with encrypted memory — a compromise of one tenant’s VM cannot read the memory of another tenant’s Trust Domain. For SaaS providers with enterprise customers who require hardware isolation in their contracts, TDX on bare metal satisfies that requirement at a lower cost than provisioning separate physical servers per tenant.

Cryptographic key management and attestation services

Hardware Security Module (HSM) alternatives, certificate authorities, and attestation services that require hardware root-of-trust operate correctly inside SGX enclaves on the XL v4. TDX and SGX can run simultaneously — the key management enclave runs in SGX while the broader application infrastructure runs inside a TDX Trust Domain. Remote attestation confirms that the enclave is running on genuine Intel hardware with expected firmware and software configurations.

Confidential AI inference at scale

LLM inference, embedding generation, and RAG pipelines that process private user data (contracts, medical records, financial documents) can run inside TDX Trust Domains where model inputs and outputs are encrypted in memory. AMX acceleration provides BF16 matrix multiply throughput for quantized model inference. This is the CPU-based confidential AI path — for GPU-accelerated confidential training, contact OpenMetal about GPU server configurations.

Sovereign and jurisdictional cloud deployments

Organizations with data residency requirements (GDPR Article 46, sector-specific data localization rules) can deploy XL v4 TDX servers in Ashburn, Los Angeles, Amsterdam, or Singapore and combine jurisdictional data placement with hardware-level memory isolation. TDX’s attestation capability provides verifiable proof that workloads ran in a specific physical location — useful for audit requirements that mandate location verification.