Create a Confidential VM instance in the Cloud console

Create a Confidential VM instance in the Cloud console

This page shows you the quickest way set up a Confidential VM instance using the Google Cloud console and default settings. For details on all configuration options, including how to set up a Confidential VM instance using the Google Cloud CLI or the Compute Engine API, see Creating a Confidential VM instance. For information about Confidential VM's features and concepts, see Confidential VM and Compute Engine.

---

To follow step-by-step guidance for this task directly in the Google Cloud console, click Guide me:

Guide me

---

Before you begin

1. Sign in to your Google Cloud account. If you're new to Google Cloud, create an account to evaluate how our products perform in real-world scenarios. New customers also get $300 in free credits to run, test, and deploy workloads.

2. In the Google Cloud console, on the project selector page, select or create a Google Cloud project.

   Note: If you don't plan to keep the resources that you create in this procedure, create a project instead of selecting an existing project. After you finish these steps, you can delete the project, removing all resources associated with the project.

   Go to project selector

3. Make sure that billing is enabled for your Google Cloud project.

4. Enable the Compute Engine API.

   Enable the API

5. In the Google Cloud console, on the project selector page, select or create a Google Cloud project.

   Note: If you don't plan to keep the resources that you create in this procedure, create a project instead of selecting an existing project. After you finish these steps, you can delete the project, removing all resources associated with the project.

   Go to project selector

6. Make sure that billing is enabled for your Google Cloud project.

7. Enable the Compute Engine API.

   Enable the API

Create a Confidential VM instance

To create a Confidential VM, complete the following steps.

Note: You can only enable Confidential Computing on a VM when you first create the instance.

1. In the Google Cloud console, go to the VM Instances page.

   Go to VM Instances

2. On the VM instances page, click Create instance.

3. In the Confidential VM service section, click Enable.

4. In the Enable Confidential Computing dialog, review the list of settings that are updated when you enable the service, and then click Enable.

5. Click Create.

You return to the VM instances page where you can view the status and details for your new instance. When a appears under Status, your new Confidential VM is ready to use.

Clean up

To avoid incurring charges to your Google Cloud account for the resources used on this page, follow these steps.

1. In the Google Cloud console, go to the VM instances page.

   Go to VM instances

2. Select the checkbox for the instance that you want to delete.
3. To delete the instance, click More actions, click Delete, and then follow the instructions.

What's next

• Learn about all of the options for creating a Confidential VM instance.
• Learn how to use Cloud Monitoring to validate your Confidential VM instances.