---
title: "Enroll a Compute Node (bare metal) - AMD SEV-SNP"
slug: "fortanix-ccm-enroll-a-compute-node-bare-metal-amd-sev-snp"
updated: 2026-07-22T14:18:06Z
published: 2026-07-22T14:18:06Z
canonical: "support.fortanix.com/fortanix-ccm-enroll-a-compute-node-bare-metal-amd-sev-snp"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.fortanix.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Enroll a Compute Node (bare metal) - AMD SEV-SNP

## 1.0 Introduction

This document describes how to enroll a compute node on a bare-metal **Advanced Micro Devices (AMD) Secure Encrypted Virtualization (SEV) - Secure Nested Paging (SNP)** platform in Fortanix Confidential Computing Manager (CCM).

## 2.0 Enroll A Compute Node (bare Metal) – AMD SEV-SNP

### 2.1 Prerequisites

- Ensure Simultaneous Multithreading (SMT) is disabled in BIOS when using AMD SEV-SNP. If enabled, the Confidential Virtual Machine (CVM) launch may fail with `fw_error=7 'Policy is not allowed'` error.
- Ensure that you have completed all required CPU, GPU, and system configuration prerequisites as outlined in the [*NVIDIA Deployment Guide for Confidential Computing*](https://docs.nvidia.com/cc-deployment-guide-tdx.pdf).
  - Check the "[***Secure AI Compatibility Matrix***](https://www.nvidia.com/en-us/data-center/solutions/confidential-computing/secure-ai-compatibility-matrix/)" to view the supported combinations of NVIDIA GPUs, VBIOS versions, CUDA driver versions, and Confidential Computing modes.

### 2.2 Ubuntu 25.10 Node Agent

*Download the Ubuntu Node Agent installer from* [*here*](https://node-agent-installer.s3.us-west-1.amazonaws.com/onprem/amd-sev-snp/latest/Node-Agent-Installer.tar.gz)*.*

Perform the following steps to enroll the Ubuntu 25.10 compute node:

1. Run the following commands to extract the contents of the **Node-Agent-installer.tar.gz** package and open the folder:

```bash
tar -zxvf Node-Agent-Installer.tar.gz
cd em-agent-snp-installer
```
2. Open the **INSTALLER_README.md** file containing the steps to enroll the compute node in Fortanix CCM.

![Text  Description automatically generated with medium confidence](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/fortanix-confidential-computing-manager-enroll-compute-nodes-on-bare-metal---intel-tdx-v2.0-image-ktlj9vqg.png)

**Figure 1: Readme.txt**
3. Run the following command to execute the **installer.sh** script:

```bash
sudo bash installer.sh <join-token>
```

Where, `&lt;join-token&gt;` is the token copied from Fortanix CCM. *For more information, refer to* [*Section 3.0: Generate a Join Token*](/v1/docs/fortanix-ccm-enroll-a-compute-node-bare-metal-amd-sev-snp#30-generate-a-join-token).

## 3.0 Generate a Join Token

Perform the following steps to generate a join token in Fortanix CCM:

1. Log in to Fortanix Armor Platform. *For more information,* [*Getting Started with Fortanix Armor*](/v1/docs/fortanix-armor-getting-started)*.*
2. Navigate to the Fortanix CCM user interface (UI). *For more information, refer to* [*Fortanix Armor Solutions*](/v1/docs/fortanix-armor-solutions)*.*
3. In the CCM UI left navigation panel, click **Infrastructure → COMPUTE NODES → AMD SEV-SNP**, and then click **ADD NODE**.

![](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/Screenshot (3896).png)

**Figure 2: Add node**
4. In the **Enroll Compute Node** window, click **COPY** to copy the Join Token. This Join Token is used by the compute node to authenticate itself.

## 4.0 Validate the Enrolled Compute Node

After the compute node is successfully enrolled, it appears in the **COMPUTE NODES** overview table in Fortanix CCM.

Perform the following steps to debug the `em-agent` service:

1. Run the following command to view the logs:

```bash
journalctl -xe | grep em-agent
```
2. Run the following command to view the status of the `em-agent` service or check the system logs directly:

```bash
systemctl status em-agent
```