Feature: TDX-vTPM support

[thinksyncs]

Is your feature request related to a problem? Please describe.

Hi,
This may be related to #493.

Cocos has SNP-vTPM, but I do not see a TDX-vTPM platform type or verifier path.

Should a TDX VM with vTPM be treated as TDX, vTPM, Azure, or a new TDX-vTPM composite path?

If TDX-vTPM is needed, should the verifier check both the vTPM quote nonce and the TDX report data?

If this is currently covered by Azure, other clouds may expose similar questions under different names.

Describe the feature you are requesting, as well as the possible use case(s) for it.

Clarify the intended platform model for Azure TDX + vTPM, including whether Cocos should introduce a distinct TDX-vTPM composite path.

Indicate the importance of this feature to you.

Should-have

Anything else?

No response

[SammyOina]

Thanks for the detailed write-up! We are actively working on TDX-vTPM support. Currently, we are evaluating and testing the experimental td-partitioning-svsm (svsm-tdp-vtpm branch) from Intel as the underlying mechanism for vTPM in TDX VMs.

Since this dependency is still in an experimental state, the feature is not yet ready. We will revisit the platform model questions you raised — including how a TDX VM with vTPM should be represented and how the verifier should handle the vTPM quote nonce alongside TDX report data — as the implementation matures.

We will keep this issue updated as things progress. Stay tuned!