Announcing IBM Cloud Data Shield beta

We announced IBM Cloud Data Shield experimental in November 2018. Since then, we have been hard at work helping our early adopters (Irene Energy and iExec) develop their Zero Trust platforms and building the next version of Data Shield. Today, we are excited to announce Data Shield beta!

Data Shield, powered by Fortanix, provides data-in-use protection for your container workloads running on the IBM Cloud Kubernetes Service. It leverages Intel® Software Guard Extensions (SGX) technology to run code and data in CPU-hardened “enclaves” or a Trusted Execution Environment (TEE). The enclave is a trusted area of memory where critical aspects of the application functionality are protected, helping keep code and data confidential and unmodified.

Data Shield provides DevOps tools that integrate with your existing build pipelines to convert your container images to shielded (Intel® SGX) counterparts with little to no code changes. It runs on the IBM Cloud Kubernetes Service to bring scalability and high availability to your sensitive workloads.

What’s new in Data Shield?

  • Container conversion tool in the UI enables you to quickly shield your application containers

  • Intel Attestation Report details in the UI

  • Integration with Identity and Access Management (IAM) service and Role Based Access Control (RBAC)

  • Integration with ingress on IBM Cloud Kubernetes Service gives you secure access to Data Shield UI and API

  • Newly redesigned Enclave Manager UI

  • Integration with IBM Logging Service

  • Enhanced deployment experience with Data Shield container image

You can now start your Data Shield journey with the IBM Cloud docs. The “Getting Started” tutorial presents you with steps to get an application protected with Data Shield. The documentation also gives you simple steps to install and manage your Data Shield instance.

You now also have an option to install Data Shield either through native Helm commands or the provided container to install Data Shield to your IBM Cloud Kubernetes Cluster.

Data Shield UI and APIs are now exposed through your IBM Cloud Kubernetes Service cluster’s ingress and TLS enabled. It is also integrated and secured through your IAM tokens.

Data Shield login page exposed through ingress

NOTE: Users with multiple IBM accounts, please make sure you are logged in with the right IBM account where you installed your Data Shield instance.

The new and redesigned Enclave Manager UI brings focus to the things that matter most and presents you with the controls to manage your shielded applications deployed on Data Shield.

Redesigned Data Shield Enclave Manager UI

The UI now enables you to add users with roles scoped to your instance of Data Shield—manager, reader, writer, or a combination of the three.

Role Based Access Controls

The Tools tab in the Enclave Manager UI helps you quickly convert your container images to shielded counterparts.

Data Shield UI conversion service

The UI now gives you a glimpse into your attestation report in addition to allowing you to download it as an x.501 certificate.

Intel Attestation Report

Finally, all your logs from Data Shield are seamlessly exported to IBM logging service. You can enable it in your cluster’s landing page.

Enable logging through IBM Cloud Kubernetes Service

All these new features will further enhance your overall user experience with Data Shield while bringing you our industry-leading runtime memory encryption technology.

Get started with Data Shield beta

To request a demo, get a Slack invite for the Data Shield workspace, or ask any questions, please email

More from Announcements

Success and recognition of IBM offerings in G2 Summer Reports  

2 min read - IBM offerings were featured in over 1,365 unique G2 reports, earning over 230 Leader badges across various categories.   This recognition is important to showcase our leading products and also to provide the unbiased validation our buyers seek. According to the 2024 G2 Software Buyer Behavior Report, “When researching software, buyers are most likely to trust information from people with similar roles and challenges, and they value transparency above other factors.”  With over 90 million visitors each year and hosting more than 2.6…

Manage the routing of your observability log and event data 

4 min read - Comprehensive environments include many sources of observable data to be aggregated and then analyzed for infrastructure and app performance management. Connecting and aggregating the data sources to observability tools need to be flexible. Some use cases might require all data to be aggregated into one common location while others have narrowed scope. Optimizing where observability data is processed enables businesses to maximize insights while managing to cost, compliance and data residency objectives.  As announced on 29 March 2024, IBM Cloud® released its next-gen observability…

Unify and share data across Netezza and for new generative AI applications

3 min read - In today's data and AI-driven world, organizations are generating vast amounts of data from various sources. The ability to extract value from AI initiatives relies heavily on the availability and quality of an enterprise's underlying data. In order to unlock the full potential of data for AI, organizations must be able to effectively navigate their complex IT landscapes across the hybrid cloud.   At this year’s IBM Think conference in Boston, we announced the new capabilities of IBM, an open…

IBM Newsletters

Get our newsletters and topic updates that deliver the latest thought leadership and insights on emerging trends.
Subscribe now More newsletters