nebula / confidential
CONNECTION GUIDE

BEFORE YOU CONNECT

Meet your confidential portal.

Review its identity, choose your browser’s certificate settings, then continue to the portal.

A guide to your next step. This page uses ordinary HTTPS. Its reported certificate and reference values help your review; this page does not independently verify attestation or establish trust in the portal.
1

Review the portal’s identity

Compare the reported fingerprint with the certificate actually presented by the portal in your browser. Independently verify the AMD SEV-SNP evidence in that certificate, its key binding, and the workload measurements you have approved.

Use your own trusted verification tools. The values on this page are supplied for convenience and need independent approval.

2

Choose browser trust settings Optional

The portal creates its RA-TLS certificate inside the confidential VM. Standard browsers do not check its attestation automatically, so a certificate warning is expected. The ordinary HTTPS connection to this guide is separate.

After independently checking the portal, you can review the certificate trust options for your browser and operating system. Where your browser offers a site-specific exception, inspect the actual certificate before choosing it.

Official browser and operating-system guidance

Trust settings can affect more than a single address and may not remove every browser warning. Review the scope of any change. Compare the portal’s actual certificate again whenever it changes.

3

Continue to your portal

Open the portal in a new tab and confirm its certificate there. Enter your access token only in the confidential portal.

Open confidential portal

Loading portal address…

Keep access tokens, recovery passwords, images and registry credentials in the confidential portal. This guide has no credential or upload fields.