Secure recovery for multiowned computing environment

A method for performing secure recovery for a multi-owned computing environment (MOCE), the method comprising, using one or more computing devices:

• establishing a confidential computing system using a trusted execution environment (TEE) associated with a plurality of participating parties (PPs), the confidential computing system including the MOCE;
• executing, on the confidential computing system, a controller in the TEE (CTEE);
• using the CTEE to generate a master key;
• generating respective master key shares corresponding to respective PPs of the plurality of PPs and providing the respective master key shares to the respective PPs;
• using the CTEE to generate a second key;
• encrypting a system state corresponding to at least one of the CTEE and the MOCE with the second key and storing the system state on an external system;
• encrypting the second key with the master key and storing the second key on the external system;
• and
• using the respective master key shares to reconstruct the master key and recovering the system state using the reconstructed master key.