What happens in case of a hardware change? Can the data still be accessed?
Yes, a nexus-aware application running on one NGSCB machine can encrypt data so that it is accessible on another NGSCB machine. The mechanism for migrating data between the two machines is similar to techniques used today to migrate secret keys among multiple cryptographic hardware accelerators. A similar technique is used to back up encryption keys to provide recovery services in the event of a catastrophic hardware failure.