# 机密计算 · 日跟踪 · 2026-10-05

> 日期：2026-10-05（Asia/Shanghai，周一）。专题正文：`intel/topics/confidential.md`。原料：`/workspace/intel/archive/2026-10-05/`（窗口 10-02 早报后→10-05 早；周末无 archive）；对照 2026-10-02 日跟踪。抓取：Saved 266 / skipped 29 / errors 40；blocked_hosts：blocksandfiles.com、docs.redhat.com、e.huawei.com、support.huawei.com、www.nextplatform.com、www.reddit.com、www.theregister.com。

## 摘要
- **本日无独立 TEE/机密容器首发。**
- **轻（厂商博客）· SEV-SNP / TDX 的 BIOS 前置：** VMware 硬件博梳理 AMD SEV→SEV-ES→SEV-SNP（Naples/Rome/Milan）与 Intel TDX（4 代 Xeon 起部分 SKU，后续更广）；AMD 需开 SVM、SEV-SNP 与 SNP Memory RMP table；VCF Readiness 可核验 TDX/SEV-SNP 已在 BIOS 启用。
- **排期 ·** VMware 安全月 10-15 webinar 含 vTPM / confidential computing；10-26 博文「Workloads Keeping Secrets: Confidential Computing」——**未发布，勿预写内容**。
- **轻 · FIPS：** RHCOS 10 博文称 RHEL 10/UBI10 密码库**仍在 FIPS140 认证中**，FIPS 场景推荐 UBI9。
- **续档 ·** Thales HNDL 61% / PQC 59%（10-02）；UKHSA ARO confidential MVP。

## 原文摘录

### VMware · Security Starts with Hardware（厂商博客，安全月 Day 2）
- 归档：`vmware/security-starts-with-hardware-cd0b9488.*`
- URL：https://blogs.vmware.com/cloud-foundation/2026/10/02/security-starts-with-hardware/

> AMD introduced confidential compute with Secure Encrypted Virtualization (SEV) on Naples, added Encrypted State (SEV-ES) on Rome, and introduced Secure Encrypted Virtualization–Secure Nested Paging (SEV-SNP) on Milan. Intel on 4th generation Xeons® introduced Trust Domain Extensions (TDX).  
> … in general AMD requires SVM mode, SEV-SNP be enabled, as well as the SNP Memory RMP table … be enabled.

### Red Hat · RHCOS 10 - Red Hat's new worker node OS for OpenShift（厂商博客）
- 归档：`redhat/rhcos-10-red-hat-s-new-worker-node-os-for-openshift-cadde1ff.*`
- URL：https://www.redhat.com/en/blog/rhcos10-red-hats-new-worker-node-os-openshift

> If FIPS140-compatibility is required, the recommended base image is UBI9, as the RHEL 10/UBI10 cipher libraries are still being FIPS140-certified.