An isolated execution area in hardware that protects code and data from host OS, hypervisor, and other workloads.