We’ve made it our mission at IBM to ensure that confidential computing is not only available across all regions, but easily consumable.

Today, we’re taking the first step by announcing the general availability of IBM Cloud Data Shield

Data needs to be protected throughout its lifecycle. One way of protecting data is through encryption. However, today’s data protection narrative is limited to encryption of data in transit (TLS) and encryption of data at rest. IBM Cloud Data Shield, powered by Fortanix, leverages Intel® Software Guard Extensions (SGX) to extend data security by supporting a true Zero Trust Architecture and encrypting data in use.

What is IBM Cloud Data Shield?

IBM Cloud Data Shield is a runtime protection offering that secures data while it is in use for containerized workloads that run on IBM Cloud Kubernetes Service and Red Hat OpenShift. The service is delivered as a Helm chart that you can integrate with your DevOps toolchains to seamlessly convert your existing containers into runtime-encrypted counterparts with a single API call. IBM Cloud Data Shield also makes the attestation process effortless by distributing attestation reports through certificates signed by the Enclave Manager.

Additionally, Data Shield extends Intel SGX support from C and C++ to Python and Java.

How can IBM Cloud Data Shield help me?

There are several exciting use cases for IBM Cloud Data Shield. If you or your company require data sensitivity because of internal policies, government regulations, or industry compliance requirements, this solution might help you to move to the cloud.

The enclave technology might be used for any of the following:

  • Applications at runtime
  • Cryptographic key management
  • Increasing the privacy and security of a blockchain
  • Preserving privacy in multi-party computation
  • Hardware enhanced content protection
  • Edge computing
  • Using a digital wallet

Questions and feedback

We’d love to hear your feedback! Check out the following links to get started:


More from Announcements

IBM TechXchange underscores the importance of AI skilling and partner innovation

3 min read - Generative AI and large language models are poised to impact how we all access and use information. But as organizations race to adopt these new technologies for business, it requires a global ecosystem of partners with industry expertise to identify the right enterprise use-cases for AI and the technical skills to implement the technology. During TechXchange, IBM's premier technical learning event in Las Vegas last week, IBM Partner Plus members including our Strategic Partners, resellers, software vendors, distributors and service…

Introducing Inspiring Voices, a podcast exploring the impactful journeys of great leaders

< 1 min read - Learning about other people's careers, life challenges, and successes is a true source of inspiration that can impact our own ambitions as well as life and business choices in great ways. Brought to you by the Executive Search and Integration team at IBM, the Inspiring Voices podcast will showcase great leaders, taking you inside their personal stories about life, career choices and how to make an impact. In this first episode, host David Jones, Executive Search Lead at IBM, brings…

IBM watsonx Assistant and NICE CXone combine capabilities for a new chapter in CCaaS

5 min read - In an age of instant everything, ensuring a positive customer experience has become a top priority for enterprises. When one third of customers (32%) say they will walk away from a brand they love after just one bad experience (source: PWC), organizations are now applying massive investments to this experience, particularly with their live agents and contact centers.  For many enterprises, that investment includes modernizing their call centers by moving to cloud-based Contact Center as a Service (CCaaS) platforms. CCaaS solutions…

See what’s new in SingleStoreDB with IBM 8.0

3 min read - Despite decades of progress in database systems, builders have compromised on at least one of the following: speed, reliability, or ease. They have two options: one, they could get a document database that is fast and easy, but can’t be relied on for mission-critical transactional applications. Or two, they could rely on a cloud data warehouse that is easy to set up, but only allows lagging analytics. Even then, each solution lacks something, forcing builders to deploy other databases for…