Fortanix CCM Feature Support Matrix (SaaS vs On-premises)

1.0 Introduction

Fortanix Confidential Computing Manager (CCM) is available as both a SaaS offering and an on-premises deployment.

While the core platform capabilities are consistent, certain features may differ based on the deployment model. This article provides a comparison of features supported in Fortanix CCM SaaS and On-premises to help users understand current availability and limitations.

Legend:

✔ - Supported
◐ - Supported in future release
✖ - Not supported

Feature	SaaS	On-Premises	Notes	Feature Guides
Groups	✔	✔	Fully supported	Groups
Collaboration Groups	✔	◐	Not currently supported for CCM on-premises	Collaboration Groups
ACI (Azure Container Instances)	✔	◐	Not currently supported for CCM on-premises	ACI Applications and Images
Azure CVM (Confidential Virtual Machine)	✔	✔	Fully supported	Azure CVM Application and Images
Confidential Container - Enclave OS - AWS Nitro	✔	◐	Not currently supported for CCM on-premises	AWS Nitro Application and Images
Confidential Container - Enclave OS - AMD SEV-SNP	✔	◐	Not currently supported for CCM on-premises	Enclave OS - AMD SEV-SNP Application and Images
Confidential Container - Enclave OS - Intel TDX	✔	◐	Not currently supported for CCM on-premises	Enclave OS - Intel TDX Application and Images
EDP (Enclave Development Platform)	✔	✔	Fully supported	EDP Application and Images
Confidential VM - AMD SEV-SNP	✔	✔	Fully supported	Confidential VM - AMD SEV-SNP Application and Images
Confidential VM - Intel TDX	✔	✔	Fully supported	Confidential VM - Intel TDX Application and Images
Confidential Container - CoCo - AMD SEV-SNP	✔	◐	Not currently supported for CCM on-premises	Confidential VM - AMD SEV-SNP Application and Images
Confidential Container - CoCo - Intel TDX	✔	◐	Not currently supported for CCM on-premises	Confidential VM - Intel TDX Application and Images
Nodes	✔	✔	Node Agent can run on Nitro VMs. EDP-based workloads are supported.	Enroll Compute Node Using Nitro
Invite Users	✔	✔	Fully supported	Invite Users
System Administration Settings	✖	✔	Not supported for CCM SaaS	System Administration
Tasks	✔	✔	Fully supported	Tasks
Datasets	✔	◐	Not currently supported for CCM on-premises	Datasets
Workflows and Collaboration Workflows	✔	✔	Only supported for Confidential VM applications in CCM on-premises	Workflows Shared Workflows
Compute Clusters and Run Workflows (Amazon Elastic Kubernetes Service, ACI)	✔	◐	Disabled currently in CCM on-premises until Workflows are supported	Run Workflows - EKS Run Workflows - ACI
Application Configuration	✔	✔	Only supported for Confidential VM applications in CCM on-premises	Application Configuration
Registry	✔	◐	Disabled currently in CCM on-premises until ACI and Nitro Converters are supported	Image Registry
Scripts and Connectors	✔	◐	Disabled currently in CCM on-premises until Workflows are supported	Scripts and Connectors
Audit Logs Integration	✔	✔	Fully supported	Logging
Metering Integration	✔	✔	Fully supported