--- title: 'Launching Your Ubuntu Confidential VM with Intel® TDX on Google Cloud: A Guide to Enhanced Security' description: In the world of cloud computing, we rely on abstraction layers to manage complex systems. While this simplifies development, it also creates vulnerabilities for sensitive data. Traditionally, privileged software within the cloud has access to your data, and could pose a significant security risk, if not managed properly. But there’s a new […] url: https://canonical.com/blog/launching-your-ubuntu-confidential-vm-with-intel-tdx-on-google-cloud-a-guide-to-enhanced-security?format=md --- 1. [Blog](https://canonical.com/blog) 2. Article --- [Hugo Huang](https://canonical.com/blog/author/hugohuangtao "More about Hugo Huang") 2 October 2024 # Launching Your Ubuntu Confidential VM with Intel® TDX on Google Cloud: A Guide to Enhanced Security [confidential computing](https://canonical.com/blog/tag/confidential-computing) [Google Cloud](https://canonical.com/blog/tag/google-cloud) [Intel](https://canonical.com/blog/tag/intel) --- Share the article In the world of cloud computing, we rely on abstraction layers to manage complex systems. While this simplifies development, it also creates vulnerabilities for sensitive data. Traditionally, privileged software within the cloud has access to your data, and could pose a significant security risk, if not managed properly. But there’s a new way to protect your data: [confidential computing](https://ubuntu.com/confidential-computing). This technology utilizes hardware-based Trusted Execution Environments (TEEs) to secure data “in use,” ensuring it cannot be accessed or modified by unauthorized parties, including the cloud provider itself. Intel® Trust Domain Extensions (Intel® TDX) is a key player in this field, offering a hardware-based isolation layer for virtual machines (VMs) running on Intel processors. This technology has been integrated into Google Cloud, and with Ubuntu’s comprehensive support, it’s easier than ever to run your workloads securely. Here’s how to launch your Ubuntu Confidential VM with Intel® TDX on Google Cloud: 1. Choose the Right Machine: Select the C3 machine series in Google Compute Engine, which utilizes 4th Gen Intel® Xeon Scalable CPUs and supports Intel® TDX technology. 2. Use the Google Cloud CLI: In the Google Cloud CLI, utilize the instance create subcommand and specify –confidential-compute-type=TDX to enable Intel® TDX for your VM. Example Command: ``` gcloud compute instances create INSTANCE_NAME \   --machine-type MACHINE_TYPE --zone us-central1-a \ ``` ```   --confidential-compute-type=TDX \ ``` ```   --on-host-maintenance=TERMINATE \   --image-family=IMAGE_FAMILY_NAME \ ``` ```   --image-project=IMAGE_PROJECT \ ``` ```   --project PROJECT_NAME ``` Where: * ***MACHINE\_TYPE*** is the [C3 machine type](https://cloud.google.com/compute/docs/general-purpose-machines#c3_machine_types) to use. * ***IMAGE\_FAMILY\_NAME*** is the name of the Confidential VM-supported image family to use, such as Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 24.04 LTS Pro Server. * ***IMAGE\_PROJECT*** is the project where the image resides. * ***PROJECT\_NAME*** is your Google Cloud project. Benefits of Ubuntu Pro with Intel® TDX: * Enhanced Security: Ubuntu Pro offers features like live kernel patching, ensuring continuous uptime and security. * Extended Support: You get ten years of long-term support (LTS) for your Ubuntu Pro installation, providing stability and reliability for your workloads. * Compliance: Ubuntu Pro meets stringent security standards like FIPS and CIS, making it ideal for highly regulated environments. Get Started Today: Embrace the latest advancements in security technology and enjoy peace of mind knowing your data is protected with Intel® TDX. Launch your Ubuntu Confidential VM on Google Cloud today! Additional Resources: * [Read our blog post: What is confidential computing? A high-level explanation for CISOs](https://canonical.com/blog/what-is-confidential-computing-a-high-level-explanation-for-cisos) * [Read our blog post: Confidential computing in public clouds: isolation and remote attestation explained](https://canonical.com/blog/confidential-computing-in-public-clouds-isolation-and-remote-attestation-explained) * [Read our blog post: Deploy confidential computing with Intel® TDX and Ubuntu 24.04 today](https://ubuntu.com/blog/deploy-confidential-computing-intel-tdx-ubuntu-2404) By leveraging the power of confidential computing with Ubuntu and Google Cloud, you can unlock a new level of data security and trust in your cloud deployments. [Get in touch Interested in running Ubuntu in your organization?](https://ubuntu.com/about/contact-us/form) ## Sign up for our newsletter Get the latest Canonical news and updates in your inbox. Work email: \*I agree to receive information about Canonical's products and services. By submitting this form, I confirm that I have read and agree to [Canonical's Privacy Policy](https://canonical.com/legal/dataprivacy). Sign up ## Share on --- ## Related posts [### Ubuntu Confidential VMs Now Available on Google Cloud A3 with NVIDIA H100 GPUs](https://canonical.com/blog/ubuntu-confidential-vms-now-available-on-google-cloud-a3-with-nvidia-h100-gpus) Organizations are racing to harness the transformative power of AI, but sensitive data privacy and model security remain critical roadblocks. What if you could unlock the full... [Hugo Huang](https://canonical.com/blog/author/hugohuangtao) 27 March 2025 [### Ubuntu Server: a platform made for enterprise scale](https://canonical.com/blog/ubuntu-server-a-platform-made-for-enterprise-scale) A platform is an environment that allows software to run smoothly across the infrastructure, runtime, and application layers. The key word there is “smoothly”: a good platform... [Rhys Knipe](https://canonical.com/blog/author/rhysknipe) 7 July 2026 [### Canonical announces optimized Ubuntu images for TPU virtual machines by Google Cloud](https://canonical.com/blog/canonical-announces-optimized-ubuntu-images-for-tpu-virtual-machines-by-google-cloud) Canonical and Google Cloud announced the availability of certified Ubuntu images for Google’s Cloud TPU Virtual Machines. [Hugo Huang](https://canonical.com/blog/author/hugohuangtao) 28 May 2026 [### Sovereign clouds: enhanced data security with confidential computing](https://canonical.com/blog/sovereign-cloud-confidential-computing) Increasingly, enterprises are interested in improving their level of control over their data, achieving digital sovereignty, and even building their own sovereign cloud.... [Ijlal Loutfi](https://canonical.com/blog/author/ijlal-loutfi) 6 March 2026