> That certificate is signed by Intel. > So you have computing resources which are protected from anyone except very few who could extract private key from secu

> That certificate is signed by Intel. > So you have computing resources which are protected from anyone except very few who could extract private key from secure chip. …and Intel. This has obvious problems in who the root of trust should be, as well as putting all the eggs in the same basket. Also, what you propose is I think equivalent to the SEV technology mentioned in the article.