> This page is for Confidential Containers, version v1.0.0. > For other versions, use one of these documentation indexes: > - v1.1.0 (default): https://docs.nvidia.com/confidential-computing/containers/v1.1.0/llms.txt > - v1.0.0: https://docs.nvidia.com/confidential-computing/containers/v1.0.0/llms.txt > - Dev: https://docs.nvidia.com/confidential-computing/containers/dev/llms.txt > For clean Markdown of any page, append .md to the page URL. > For a complete documentation index, see https://docs.nvidia.com/confidential-computing/llms.txt. > For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.nvidia.com/confidential-computing/_mcp/server. # Supported Platforms > Following are the platforms supported by the NVIDIA Confidential Containers Reference Architecture. Following are the platforms supported by the NVIDIA Confidential Containers Reference Architecture. This page is relevant to the following users: * The [Hardware IT Administrator](/confidential-computing/containers/v1.0.0/personas#coco-persona-hardware-it-administrator) uses the hardware tables to confirm that the selected CPU and GPU are validated for Confidential Computing before configuring the system. * The [Host OS Administrator](/confidential-computing/containers/v1.0.0/personas#coco-persona-host-os-administrator) uses the hardware tables to confirm validated host OS and kernel versions. * The [Kubernetes Cluster Administrator](/confidential-computing/containers/v1.0.0/personas#coco-persona-kubernetes-cluster-administrator) uses the software component matrix to confirm that the correct versions are in place before beginning cluster installation. ## Hardware ### NVIDIA GPUs | GPU | Passthrough | | ---------------------------------- | --------------------- | | NVIDIA H100 | Single-GPU | | NVIDIA H200 | Single-GPU | | NVIDIA H100 Protected PCIe (PPCIe) | Multi-GPU | | NVIDIA H200 Protected PCIe (PPCIe) | Multi-GPU | | NVIDIA B200 | Single-GPU, Multi-GPU | | NVIDIA RTX Pro 6000 BSE | Single-GPU | > **Note** > > [Multi-GPU passthrough](/confidential-computing/containers/v1.0.0/configure-workloads#coco-multi-gpu-passthrough) on NVIDIA Hopper HGX systems requires that you set the Confidential Computing mode to `ppcie` mode. > Refer to [Managing the Confidential Computing Mode](/confidential-computing/containers/v1.0.0/configure-cc-mode) for details. > **Note** > > For both single and multi GPU Passthrough, all GPUs on the host must be configured for Confidential Computing and all GPUs must be assigned to one Confidential Container virtual machine. > Configuring only some GPUs on a node for Confidential Computing is not supported. ### CPU Platforms | Category | TEE | Operating System | Kernel Version | | ------------------------------------------------ | ----------- | ---------------- | -------------- | | AMD Genoa / Milan | AMD SEV-SNP | Ubuntu 25.10 | 6.17+ | | Intel Emerald Rapids (ER) / Granite Rapids (GR) | Intel TDX | Ubuntu 25.10 | 6.17+ | For additional information on node configuration, refer to the [Confidential Computing Deployment Guide](https://docs.nvidia.com/cc-deployment-guide-tdx-snp.pdf) for information about supported NVIDIA GPUs, such as the NVIDIA Hopper H100. The following topics in the deployment guide apply to a cloud-native environment: * Hardware selection and initial hardware configuration, such as BIOS settings. * Host operating system selection, initial configuration, and validation. When following the cloud-native sections in the deployment guide linked above, use Ubuntu 25.10 as the host OS with its default kernel version and configuration. For additional resources on machine setup: * Refer to the [NVIDIA Trusted Computing Solutions website](https://docs.nvidia.com/nvtrust/index.html). * Refer to the [Licensing](/confidential-computing/containers/v1.0.0/licensing) page for more information on the licensing requirements for NVIDIA Confidential Computing capabilities. ## Supported Software Components | Component | Release/Version | | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ---------------------------------------------- | | Guest OS | Distroless | | Guest kernel | 6.18.5 | | [OVMF](https://github.com/tianocore/edk2) | edk2-stable202511 | | [QEMU](https://www.qemu.org/) | 10.1 + Patches | | [Containerd](https://github.com/containerd/containerd) | 2.2.2 | | [Kubernetes](https://kubernetes.io/) | 1.32 + | | [NVIDIA GPU Operator](https://docs.nvidia.com/datacenter/cloud-native/gpu-operator/latest/index.html) and its components.Refer to the [GPU Operator Component Matrix](https://docs.nvidia.com/datacenter/cloud-native/gpu-operator/latest/platform-support.html#operator-component-matrix) for the list of components and versions included in each release. | v26.3.1 and higher | | [Kata Containers](https://katacontainers.io/) | 3.29 (installed with `kata-deploy` Helm chart) | | [Key Broker Service (KBS) protocol](https://confidentialcontainers.org/docs/attestation/) | 0.4.0 | | [Kata Lifecycle Manager](https://github.com/kata-containers/lifecycle-manager) | 0.1.4 | Users may leverage [Red Hat OpenShift Sandboxed Containers](https://docs.redhat.com/en/documentation/openshift_sandboxed_containers/1.12) to deploy Confidential Containers, however, Confidential GPU features are currently classified as Technology Preview by the downstream provider.