Broadcast remote sealing for scalable trusted execution environment provisioning

A method comprising:

• authorizing, by hardware circuitry of a cloud service provider (CSP) execution platform for secure execution of a workload of a tenant that is remote to the CSP execution platform, the tenant to deploy workloads of the tenant to CSP execution resources of the CSP execution platform, wherein the CSP execution resources comprising at least one of one or more virtualized environments or one or more hardware accelerator devices;
• providing, by the hardware circuitry, a group status report to the tenant to inform the tenant of an existence and a status of a group of trusted execution platforms, wherein the group comprises at least one of the CSP execution resources;
• receiving, by the hardware circuitry from the tenant, an encrypted workload of the tenant, wherein the encrypted workload is encrypted using a group public key of the group;
• storing, by the hardware circuitry, the encrypted workload at storage of the CSP execution platform;
• and
• dispatching, by the hardware circuitry, the encrypted workload to the at least one of the CSP execution resources of the group, wherein the dispatch to occur without interaction from the tenant.

A non-transitory machine readable storage medium comprising instructions that, when executed, cause at least one processor to at least:

• authorize, by hardware circuitry of a cloud service provider (CSP) execution platform for secure execution of a workload of a tenant that is remote to the CSP execution platform, the tenant to deploy workloads of the tenant to CSP execution resources of the CSP execution platform, wherein the CSP execution resources comprising at least one of one or more virtualized environments or one or more hardware accelerator devices;
• provide, by the hardware circuitry, a group status report to the tenant to inform the tenant of an existence and a status of a group of trusted execution platforms, wherein the group comprises at least one of the CSP execution resources;
• receive, by the hardware circuitry from the tenant, an encrypted workload of the tenant, wherein the encrypted workload is encrypted using a group public key of the group;
• store, by the hardware circuitry, the encrypted workload at storage of the CSP execution platform;
• and
• dispatch, by the hardware circuitry, the encrypted workload to the at least one of the CSP execution resources of the group, wherein the dispatch to occur without interaction from the tenant.