Broadcast remote sealing for scalable trusted execution environment provisioning

A method comprising:

• requesting, by one or more processors of a computing device associated with a tenant, a group status report to confirm a status of a group of trusted execution platforms from a cloud service provider (CSP) providing scalable runtime validation for on-device design rule checks;
• validating, by the one or more processors, a minimum trusted computing base (TCB) declared with the group status report;
• determining, by the one or more processors based on validation of the minimum TCB, whether a set of group members of the group of trusted execution platforms satisfies security requirements of the tenant;
• responsive to the set of group members satisfying the security requirement, utilizing a group public key to encrypt a workload of the tenant;
• and
• sending the encrypted workload to the CSP for storage by the CSP and subsequent execution by an execution platform of the group of trusted execution platforms using a private group key.

A non-transitory machine readable storage medium comprising instructions that, when executed, cause at least one processor to at least:

• request, by the at least one processor of a computing device associated with a tenant, a group status report to confirm a status of a group of trusted execution platforms from a cloud service provider (CSP) providing scalable runtime validation for on-device design rule checks;
• validate, by the at least one processor, a minimum trusted computing base (TCB) declared with the group status report;
• determine, by the at least one processor based on validation of the minimum TCB, whether a set of group members of the group of trusted execution platforms satisfies security requirements of the tenant;
• responsive to the set of group members satisfying the security requirement, utilize a group public key to encrypt a workload of the tenant;
• and
• send the encrypted workload to the CSP for storage by the CSP and subsequent execution by an execution platform of the group of trusted execution platforms using a private group key.