Intel sets Diamond Rapids as the final Xeon platform with SGX

A roadmap decision with a transition window

On October 9, 2026, Intel said its forthcoming Xeon platform code-named Diamond Rapids would be the last to include Software Guard Extensions (SGX). The company is concentrating its confidential computing roadmap on Trust Domain Extensions (TDX). Intel says support and security updates for SGX platforms will continue into the early 2030s; it has not announced an immediate shutdown of existing systems.

Source: Intel confidential computing roadmap update, Intel newsroom: dated confidential computing announcement listing

The isolation boundary changes

Intel’s accompanying migration documentation distinguishes application-level isolation and attestation under SGX from virtual-machine-level protection under TDX. It separates applications built around a library operating system from those using the SGX SDK, with different transition paths for each. That distinction makes the software architecture relevant to the migration plan.

The roadmap also identifies continued investment in TDX Connect for trusted I/O, post-quantum cryptography and enhanced attestation. These are Intel’s stated development priorities, rather than a claim that every current server configuration already supports those capabilities.

Source: Intel confidential computing roadmap update, Transition paths for Intel SGX applications to Intel TDX: introduction

LANGOM perspective

For enterprise infrastructure teams, the useful next step is an application inventory tied to server refresh dates. Record which services require SGX, who maintains their enclave code and which suppliers control the supporting libraries. Ask each software vendor for its intended migration path and the hardware and operating-system combinations it will support.

Security acceptance should examine the new trust boundary, not just whether an application starts successfully. Include attestation verification, key release, patching and recovery in the evaluation. A move to a confidential virtual machine can change which software components the organization must trust.

Procurement plans should also distinguish processor availability from the lifetime of a complete supported solution. Align hardware, firmware and application support commitments before setting a replacement schedule. Those are LANGOM’s evaluation priorities; the roadmap alone does not establish a customer-specific migration cost or completion date.

← All industry news