Red Hat Summit Red Hat SummitSupportConsoleDevelopersStart a trialContact

Chapter 9. Configuring a RHEL VM on Azure with AMD SEV SNP

You can configure AMD Secure Encrypted Virtualization with Secure Nested Paging (SEV-SNP) on RHEL VMs on Azure to create a trusted boot environment. SEV-SNP protects your data from access by the hypervisor and cloud service provider, and is available only for AMD EPYC processor family.

Prerequisites

  • You have installed the openssh and openssh-clients packages.
  • You have installed the Azure CLI utility. For details, see Installing the Azure CLI.
  • You have created an Azure virtual machine (VM) that uses a supported AMD EPYC processor-based machine type. For a list of supported machine types, see Supported VM sizes for CVM.

Procedure

  1. Log in to Azure by using the Azure CLI utility: 

    $ az login
    Copy to Clipboard Toggle word wrap

  2. Create an azure resource group for selected availability zone: 

    $ az group create --name <example_resource_group> --location eastus
    Copy to Clipboard Toggle word wrap

  3. Deploy a RHEL instance with SEV-SNP, for example, the Standard_DC4as_V5 instance type: 

    $ az vm create --resource-group <example_resource_group> \
--name <example-rhel-10-sev-snp-instance> \
--image <RedHat:rhel:10_x64_Gen2:latest> \
--size <Standard_DC4as_V5> \
--admin-username <example_azure_user> \
--generate-ssh-keys \
--security-type ConfidentialVM \
--os-disk-security-encryption-type DiskWithVMGuestState
    Copy to Clipboard Toggle word wrap

  4. Connect to the RHEL instance: 

    $ ssh <example_azure_user>@<example_ip_address_of_VM>
    Copy to Clipboard Toggle word wrap

Verification

  • Check kernel logs to verify status of SEV-SNP: 

    $ sudo dmesg | grep -i sev
    Copy to Clipboard Toggle word wrap 
    ...
[    0.547223] Memory Encryption Features active: AMD SEV
[    4.843171] kvm-guest: setup_efi_kvm_sev_migration : EFI live migration variable not found
...
    Copy to Clipboard Toggle word wrap
Red Hat logoGithubredditYoutubeTwitter

Learn

Try, buy, & sell

Communities

About Red Hat Documentation

We help Red Hat users innovate and achieve their goals with our products and services with content they can trust. Explore our recent updates.

Making open source more inclusive

Red Hat is committed to replacing problematic language in our code, documentation, and web properties. For more details, see the Red Hat Blog.

About Red Hat

We deliver hardened solutions that make it easier for enterprises to work across platforms and environments, from the core datacenter to the network edge.

Theme

© 2026 Red HatBack to top