- genuscreen Virtual, genuscreen Attestation Server, and genuscreen Smartcard Server: New Trust and Identity Building Blocks for the Cloud
- Cryptographically Verifiable Security Instead of Unconditional Trust
- Data-in-Use Finally Protected, Even in Multi-Tenant Environments
Kirchheim, October 27, 2026 – genua, a leading provider of IT security solutions for industry and government agencies and a company of the Bundesdruckerei Group, is expanding its portfolio with three key components for confidential computing in cloud environments:
- genuscreen Virtual is the highly secure virtualized VPN gateway with an integrated attestation client for use in cloud environments.
- genuscreen Attestation Server is an immutable trust anchor for the remote attestation of secure processing environments
- genuscreen Smartcard Server centrally provisions a smartcard for multiple virtualized endpoints and drastically reduces the effort required for modern, highly secure IT landscapes.
With these new trust and identity building blocks for cloud computing environments, genua strengthens the user’s position vis-à-vis the cloud provider: Contractually agreed assurances are replaced by cryptographically verifiable security. In this way, genua promotes cloud offerings even for regulated organizations.
Trust Anchor for Secure Cloud Computing
In cloud computing applications, data can currently be securely encrypted during transmission and storage—but it is decrypted for processing. Under certain circumstances, hypervisors or administrators may be able to access it. This is particularly problematic in virtualized multi-tenant cloud environments: Without a trusted attestation, a user cannot be certain that their data will not be compromised by the platform or other workloads.
Attestation Server closes this potential security vulnerability: The security anchor, which resides within the user’s control, uses cryptographic methods to automatically verify that the isolated processing environment in the cloud is trustworthy, that the code is unaltered, and that it is executed correctly.
To this end, genuscreenAttestation Server communicates via a highly secure, proprietary protocol with the Attestation Client of genuscreen Virtual,genua’s cloud-integrated virtualized VPN gateway. This creates a holistic security chain—specifically designed to meet the highest trust requirements of regulated organizations.
One Smart Card for Many End Devices
genuscreen Smart Card Server flexibly provision a single physical chip card (smart card) over the network for multiple virtualized instances. This eliminates the need for separate card readers on the end devices. The result: less hardware, simplified operation, and a central identity anchor for all genua products deployed in the cloud. This allows central security functions to be utilized multiple times in virtualized environments and cloud infrastructures in accordance with strict BSI guidelines.
“genuscreen Virtual, genuscreen Attestation Server, and genuscreen Smartcard Server are the core components of our confidential computing strategy. They build trust and security, enabling organizations and government agencies to process even their most sensitive data in the cloud,” says Matthias Ochs, Managing Director of genua.
Availability
genuscreen Virtual, genuscreen Attestation Server, and genuscreen Smartcard Server are already released. genua provides customers with comprehensive consulting and implementation support to seamlessly integrate the solutions into existing IT architectures.
genua will present its confidential computing solution portfolio at the it-sa Expo & Congress 2026 (October 27–29, 2026, Hall 9, Booth 424 in Nuremberg).
Further Information
Image Caption
The genuscreen Smartcard Server enables the distribution of a physical smartcard to multiple virtual instances of genuscreen Virtual running in the cloud. © genua GmbH
