Additional Hardware-Level Security from AMD
-
Cases like Meltdown and Spectre showed that minuscule flaws in hardware-layer security can become serious breaches in another person's keen eyes. AMD’s SEV-ES and latest SEV-SNP exist to protect guest OS by encrypting all CPU register content. So, if your hypervisor is compromised, it won’t be able to access any guest OS data.
Read the article by Alex Samoylenko, a virtualization pro, discussing AMD’s tools to help you make your virtualized environment’s hardware layer security airtight.