Amazon Web Services → Microsoft Azure
Azure equivalent of NitroTPM & UEFI Secure Boot
EC2 UEFI Secure Boot plus NitroTPM maps to Azure Trusted Launch (Secure Boot, vTPM, and boot integrity monitoring).
About NitroTPM & UEFI Secure Boot
| Provider | Amazon Web Services |
|---|---|
| Status | Generally available |
| What it is | A virtual TPM 2.0 plus UEFI Secure Boot for EC2 instances launched from AMIs configured for them. Enables measured boot and BitLocker-style key sealing. |
| Documentation | docs.aws.amazon.com |
| Pricing | Official pricing page |
Azure mappings (1)
| Capability | Azure equivalent | Match |
|---|---|---|
| Secure Boot and virtual TPM | Trusted Launch for Azure VMs | Direct match |
VM security & operations(1)
Secure Boot and virtual TPM Direct match
EC2 UEFI Secure Boot plus NitroTPM maps to Azure Trusted Launch (Secure Boot, vTPM, and boot integrity monitoring).
- Defaults. Trusted Launch is the default for new Azure Gen2 VMs and scale sets, and existing Gen1 VMs can be upgraded. On EC2, NitroTPM and Secure Boot must be enabled in the AMI (boot mode UEFI, TPM support).
- Monitoring. Azure adds guest attestation and boot integrity monitoring surfaced in Defender for Cloud. AWS exposes NitroTPM attestation documents for your own checks.
- Driver gotchas. On Azure, installing CUDA on Secure Boot Linux VMs other than Ubuntu needs Secure Boot disabled. Check GPU driver signing on both sides.