By using the vSphere Client, you can configure Virtual Intel® Software Guard Extensions (vSGX) for virtual machines and provide additional security to your workloads.
Some modern Intel CPUs implement a security extension called Intel® Software Guard Extensions (Intel SGX). Intel SGX is a processor-specific technology that defines private regions of memory, called enclaves. Intel SGX protects the enclave contents from disclosure or modification in such a way that code running outside the enclave cannot access them.
vSGX enables virtual machines to use Intel SGX technology if available on the hardware. To use vSGX, the ESXi host must be installed on an SGX-capable CPU and SGX must be enabled in the BIOS of the ESXi host. You can use the vSphere Client to enable SGX for a virtual machine.
