In one embodiment, a computer system comprises a host machine comprising a plurality of compute resources, at least one secure memory location coupled to the host machine, wherein the secure memory location stores host machine configuration data, and a virtual machine host module coupled to the host machine. The virtual machine host module comprises logic to map a path to the secure memory location, receive a signal indicating whether a first virtual machine guest should be permitted access to the host machine configuration data, and associate at least a portion of the host machine configuration data with the first virtual machine guest when the when the signal indicates that the first virtual machine guest should be permitted to access the configuration data.