---
title: "Enroll a Compute Node (bare metal) - AMD SEV-SNP"
slug: "enroll-a-compute-node-bare-metal-amd-sev-snp-1"
updated: 2026-08-19T12:58:35Z
published: 2026-08-19T12:58:35Z
canonical: "support.fortanix.com/enroll-a-compute-node-bare-metal-amd-sev-snp-1"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.fortanix.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Enroll a Compute Node (bare metal) - AMD SEV-SNP

## 1.0 Introduction

This article describes how to enroll a compute node using bare metal on an **Advanced Micro Devices (AMD) Secure Encrypted Virtualization (SEV) - Secure Nested Paging (SNP)** platform in **Fortanix Confidential Computing Manager (CCM)**.

## 2.0 Enroll a Compute Node (Bare Metal) - AMD SEV-SNP

### 2.1 Prerequisites

- Ensure Simultaneous Multithreading (SMT) is disabled in BIOS when using AMD SEV-SNP. If enabled, the Confidential Virtual Machine (CVM) launch may fail with `fw_error=7 'Policy is not allowed'` error.
- Ensure that you have completed all required CPU, GPU, and system configuration prerequisites as outlined in the [*NVIDIA Deployment Guide for Confidential Computing*](https://docs.nvidia.com/cc-deployment-guide-tdx.pdf).
  - Check the "[***Secure AI Compatibility Matrix***](https://www.nvidia.com/en-us/data-center/solutions/confidential-computing/secure-ai-compatibility-matrix/)" to view the supported combinations of NVIDIA GPUs, VBIOS versions, CUDA driver versions, and Confidential Computing modes.

### 2.1 Ubuntu 25.10 Node Agent

*Download the Ubuntu Node Agent installer from* [*here*](/v1/docs/fortanix-node-agent-software-amd-sev-snp-platform)*.*

Perform the following steps to enroll the Ubuntu 25.10 compute node:

1. Extract the contents of the `Node-Agent-Installer.tar.gz` package and open the folder.

```bash
tar -zxvf Node-Agent-Installer.tar.gz
cd em-agent-snp-installer
```
2. Open the `INSTALLER_README.md` file containing the steps to enroll the compute node in Fortanix CCM.

![nodeagentinstaller.png](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/4414195283092.png)

**Figure 1: INSTALLER_README**

The `INSTALLER_README.md` has the steps to enroll a compute node in Fortanix CCM.
3. Run the `installer.sh` using the command:

```bash
sudo bash installer.sh <join_token>
```

Where, `&lt;join-token&gt;` is the token copied from Fortanix CCM. *For more details, refer to* [*Section 3.0: Generating Join Token*](/v1/docs/enroll-a-compute-node-bare-metal-amd-sev-snp-1#30-generating-join-token)*.*

## 3.0 Generating Join Token

Perform the following steps to generate a join token in Fortanix CCM:

1. Log in to [https://ccm.fortanix.com.](https://ccm.fortanix.com.)
2. Click the **Infrastructure → Compute Nodes** in the CCM UI left navigation bar, and then click **+ ADD NODE**.

![](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/Screenshot (3642).png)

**Figure 2: Add node**
3. In the **ENROLL COMPUTE NODE** window, a Join Token will be generated in the text box for "**Generate Join Token**". This Join Token is used by the compute node to authenticate itself.

![](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/Screenshot (3643).png)

**Figure 3: Join token generated**
4. Click **COPY** to copy the Join Token.

## 4.0 Validating the Enrolled Compute Node

After the compute node is enrolled in Fortanix CCM, you will see it under the **Compute Nodes** overview table.

![](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/Screenshot (3644).png)

**Figure 4: Enrolled node**

Debug:

1. To view the logs, run the following command:

```bash
journalctl -xe | grep em-agent
```
2. To view the status, run the following command or directly check the `syslog`:

```bash
systemctl status em-agent
```