A processing device comprising: a processing core that is to: execute a tenant workload and a resource management capability to manage the tenant workload, the resource management capability including a hypervisor and the tenant workload including a virtual machine running on top of the hypervisor; and reference a micro-architectural structure of the processing device that is access-controlled against software access to obtain at least one key identifier, ID, corresponding to an encryption key assigned to the tenant workload, the key ID to allow the processing device to decrypt memory pages assigned to the tenant workload responsive to the processing device executing in the context of the tenant workload, the memory pages assigned to the tenant workload encrypted with the encryption key, the micro-architectural structure to hold meta-data attributes for each physical memory page and the meta-data attributes are direct indexed by the physical page address of the physical memory page, wherein the processing core is further to: maintain a tenant workload control structure for managing global metadata of one or more of the tenant workload or other tenant workloads executed by the processing device; maintain an execution state of the tenant workload in one or more tenant workload thread control structure that is referenced by the tenant workload control structure and is access-controlled against software access from at least one of the resource management capability, a hypervisor, or the other tenant workloads, and wherein the tenant workload control structure comprises a signature structure that captures a cryptographic measurement of the tenant workload, the cryptographic measurement signed by a hardware root of trust of the processing device, and wherein the signature structure is provided to an attestation party for verification of the cryptographic measurement. a processing core that is to: execute a tenant workload and a resource management capability to manage the tenant workload, the resource management capability including a hypervisor and the tenant workload including a virtual machine running on top of the hypervisor; and reference a micro-architectural structure of the processing device that is access-controlled against software access to obtain at least one key identifier, ID, corresponding to an encryption key assigned to the tenant workload, the key ID to allow the processing device to decrypt memory pages assigned to the tenant workload responsive to the processing device executing in the context of the tenant workload, the memory pages assigned to the tenant workload encrypted with the encryption key, execute a tenant workload and a resource management capability to manage the tenant workload, the resource management capability including a hypervisor and the tenant workload including a virtual machine running on top of the hypervisor; and reference a micro-architectural structure of the processing device that is access-controlled against software access to obtain at least one key identifier, ID, corresponding to an encryption key assigned to the tenant workload, the key ID to allow the processing device to decrypt memory pages assigned to the tenant workload responsive to the processing device executing in the context of the tenant workload, the memory pages assigned to the tenant workload encrypted with the encryption key, the micro-architectural structure to hold meta-data attributes for each physical memory page and the meta-data attributes are direct indexed by the physical page address of the physical memory page, wherein the processing core is further to: maintain a tenant workload control structure for managing global metadata of one or more of the tenant workload or other tenant workloads executed by the processing device; maintain an execution state of the tenant workload in one or more tenant workload thread control structure that is referenced by the tenant workload control structure and is access-controlled against software access from at least one of the resource management capability, a hypervisor, or the other tenant workloads, and maintain a tenant workload control structure for managing global metadata of one or more of the tenant workload or other tenant workloads executed by the processing device; maintain an execution state of the tenant workload in one or more tenant workload thread control structure that is referenced by the tenant workload control structure and is access-controlled against software access from at least one of the resource management capability, a hypervisor, or the other tenant workloads, and wherein the tenant workload control structure comprises a signature structure that captures a cryptographic measurement of the tenant workload, the cryptographic measurement signed by a hardware root of trust of the processing device, and wherein the signature structure is provided to an attestation party for verification of the cryptographic measurement.