TDX Confidential VM with non-CC GPU

Can I pass-through GPUs such as A100, V100, T4, etc. instead of H100 in a Confidential VM on TDX?

You could refer to passing-through older-generation GPUs on AMD SEV.

Notably, while the CVM could possibly run CUDA programs, the security is not guaranteed because the GPU does not support encrypted DMA.

i understand the security issue.

and so passing-through older-generation GPUs on Intel TDX is not supported at the moment.

even with these patches i found here in the Confidential Computing Deployment Guide by NVIDIA

is that correct?

It is possible to attach older-generation GPUs to TDX VMs. The idea is to use bounce buffer for DMAs.

Using TDX could protect your data on CPU. However, using older-generation GPUs could not protect data on GPU or on PCIe.

Thank you so much for the reply.

If so, is there any guide document that I can follow so I can attach older-generation GPUs to TDX VMs?