Does RTX 5000 series support CC?

[NSKernel]

Hi, I have a question about the RTX 5000 series and confidential computing. Although I know it's highly unlikely, but since RTX 5000 GPUs are based on Blackwell, will they support confidential computing so that developers can test stuff on their own computer?

[praveen-palanisamy]

The answer is unfortunately, No, AFAIK.

The consumer GPU dies (like the GB202 used in the RTX 5090) likley omit several critical hardware blocks found in enterprise counterparts (like the B200). THe TEE-I/O hardware which includes specialized logic for secure, encrypted data paths directly between the GPU & the CPU's enclave (e.g., Intel TDX or AMD SEV-SNP) are likely only implemented in the enterprise Blackwell chips.
I believe the RTX 5000 series (including the highest end RTX 5090) consumer GPUs lack support/documentation for Hardware Root of trust (RoT). That's the dedicated on-die security processor and Unique Device Secret (UDS) fused during manufacturing that are necessary for hardware-based identity used in CC mode and in TEE setups.

Also, I don't see full support for encrypted memory controllers in the RTX 5000 series or RTX 5090.
The RTX 5090 lacks official support for ECC (which existed in RTX 4090 (AD102) and RTX 3090Ti (GA102)).
There's also no official info on the support in RTX 5090 for the hardware-accelerated inline memory encryption engines (e.g., AES-GCM) found in Hopper H100/ H200 and Blackwell (B200/GB200) data center GPUs that protect data in HBM memory from physical bus-snooping.

Essentially, since the RTX 5000 series/RTX 5090 cannot generate the necessary hardware-signed attestation reports, we won't be able to use/test withnvtrust.