diff --git a/libvirt/tests/cfg/cpu/secure_host_validate.cfg b/libvirt/tests/cfg/cpu/secure_host_validate.cfg
new file mode 100644
index 00000000000..449e08c62d5
--- /dev/null
+++ b/libvirt/tests/cfg/cpu/secure_host_validate.cfg
@@ -0,0 +1,56 @@
+- cpu.secure_launch.secure_host_validate:
+    type = secure_host_validate
+    start_vm = "no"
+    only x86_64
+    kernel_msg_cmd = "journalctl -b 0 -k"
+    variants:
+        - amd_sev:
+            cpu_vendor = "amd"
+            secure_feature = "sev"
+            cpu_flags = ["sev"]
+            req_kernel_opts = ["mem_encrypt=on", "amd_iommu=on"]
+            kvm_probe_module_force_load = yes
+            kvm_probe_module_parameters = "sev=1"
+            req_cmds = {"sevctl": {"package": "sevctl", "cmd_params": "ok"}, "virt-host-validate": {"package": "libvirt", "cmd_params": ""}}
+            sevctl_patterns = ['\[.*PASS.*\]\s+-\s+Secure\sEncrypted\sVirtualization\s+\(SEV\)']
+            virt-host-validate_patterns = ['QEMU: Checking for secure guest support\s+:\s+PASS\n\s*\(SEV']
+        - amd_sev_es:
+            cpu_vendor = "amd"
+            secure_feature = "sev-es"
+            cpu_flags = ["sev", "sev_es"]
+            req_kernel_opts = ["mem_encrypt=on", "amd_iommu=on"]
+            kvm_probe_module_force_load = yes
+            kvm_probe_module_parameters = "sev=1 sev-es=1"
+            req_cmds = {"sevctl": {"package": "sevctl", "cmd_params": "ok"}, "virt-host-validate": {"package": "libvirt", "cmd_params": ""}}
+            sevctl_patterns = ['\[.*PASS.*\]\s+-\s+Secure\sEncrypted\sVirtualization\s+\(SEV\)', '\[.*PASS.*\]\s+-\s+Encrypted\sState\s+\(SEV-ES\)']
+            virt-host-validate_patterns = ['QEMU: Checking for secure guest support\s+:\s+PASS\n\s*\(SEV']
+        - amd_sev_snp:
+            cpu_vendor = "amd"
+            secure_feature = "sev-snp"
+            cpu_flags = ["sev", "sev_es", "sev_snp"]
+            req_kernel_opts = ["mem_encrypt=on", "amd_iommu=on"]
+            kvm_probe_module_force_load = yes
+            kvm_probe_module_parameters = "sev=1 sev-es=1 sev-snp=1"
+            req_cmds = {"sevctl": {"package": "sevctl", "cmd_params": "ok"}, "virt-host-validate": {"package": "libvirt", "cmd_params": ""}}
+            sevctl_patterns = ['\[.*PASS.*\]\s+-\s+Secure\sEncrypted\sVirtualization\s+\(SEV\)', '\[.*PASS.*\]\s+-\s+Encrypted\sState\s+\(SEV-ES\)', '\[.*PASS.*\]\s+-\s+Secure Nested Paging\s+\(SEV-SNP\)']
+            virt-host-validate_patterns = ['QEMU: Checking for secure guest support\s+:\s+PASS\n\s*\(SEV-SNP\)']
+        - intel_sgx:
+            func_supported_since_libvirt_ver = (9, 0, 0)
+            cpu_vendor = "intel"
+            secure_feature = "sgx"
+            cpu_flags = ["sgx", "sgx_lc"]
+            kernel_msg_patterns = ["EPC section"]
+            domcap_xpath = [{'element_attrs':[".//features/sgx[@supported='yes']"]}, {'element_attrs':[".//features/sgx/flc"],'text':'yes'}, {'element_attrs':[".//features/sgx/sgx1"],'text':'yes'}, {'element_attrs':[".//features/sgx/sgx2"],'text':'yes'}, {'element_attrs':[".//features/sgx/section_size[@unit='KiB']"]}, {'element_attrs':[".//features/sgx/sections"]}]
+        - intel_tdx:
+            func_supported_since_libvirt_ver = (11, 10, 0)
+            cpu_vendor = "intel"
+            secure_feature = "tdx"
+            cpu_flags = ["tdx_host_platform"]
+            req_kernel_opts = ["nohibernate", "intel_iommu=on"]
+            kvm_probe_module_force_load = yes
+            kvm_probe_module_parameters = "tdx=1"
+            kvm_probe_module_ignored_parameters = vmentry_l1d_flush=not required
+            domcap_xpath = [{'element_attrs':[".//features/launchSecurity[@supported='yes']"]}, {'element_attrs':[".//features/launchSecurity/enum[@name='sectype']"]},  {'element_attrs':[".//features/launchSecurity/enum/value"],'text':'tdx'}]
+            req_cmds = {"virt-host-validate": {"package": "libvirt", "cmd_params": ""}}
+            virt-host-validate_patterns = ['QEMU: Checking for secure guest support\s+:\s+PASS\n\s*\(TDX\)']
+
diff --git a/libvirt/tests/src/cpu/secure_host_validate.py b/libvirt/tests/src/cpu/secure_host_validate.py
new file mode 100644
index 00000000000..535ef08f434
--- /dev/null
+++ b/libvirt/tests/src/cpu/secure_host_validate.py
@@ -0,0 +1,110 @@
+#
+# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+#
+#   Copyright Red Hat
+#
+#   SPDX-License-Identifier: GPL-2.0
+#
+#   Author: Liang Cong <lcong@redhat.com>
+#
+# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+from avocado.utils import cpu as cpu_utils
+from avocado.utils import process
+
+from virttest import cpu
+from virttest import libvirt_version
+from virttest import utils_misc
+from virttest import utils_package
+from virttest.libvirt_xml import domcapability_xml
+from virttest.utils_libvirt import libvirt_vmxml
+from virttest.utils_test import libvirt
+
+
+def run(test, params, env):
+    """
+    Verify below secure launch features are supported by the host:
+    1. AMD SEV, SEV-ES, SEV-SNP
+    2. INTEL SGX
+    3. INTEL TDX
+    """
+    def validate_prerequisites():
+        """
+        Verify secure launch prerequisites of the host.
+        """
+        def _validate_cpu_vendor():
+            """
+            Validate host CPU vendor matches the expected vendor specified
+            """
+            exp_vendor = params.get("cpu_vendor")
+            act_vendor = cpu_utils.get_vendor()
+            if exp_vendor and exp_vendor != act_vendor:
+                test.cancel("%s is not supported on %s CPU." % (secure_feature, act_vendor))
+
+        def _validate_cpu_flag():
+            """
+            Validate host CPU supports the required feature flags
+            """
+            host_cpu_flags = set(cpu.get_cpu_flags())
+            cpu_flags = eval(params.get("cpu_flags", "[]"))
+            if cpu_flags and not set(cpu_flags).issubset(host_cpu_flags):
+                test.cancel("%s requires cpu flags %s, but host cpu flags is %s." % (secure_feature, cpu_flags, host_cpu_flags))
+
+        def _validate_kernel_option():
+            """
+            Validate required kernel options are present in kernel cmdline
+            """
+            req_kernel_opts = eval(params.get("req_kernel_opts", "[]"))
+            ker_cml = utils_misc.get_ker_cmd()
+            if not all(opt in ker_cml for opt in req_kernel_opts):
+                test.cancel("%s requires kernel opt %s, but kernel cml is %s." % (secure_feature, req_kernel_opts, ker_cml))
+
+        _validate_cpu_vendor()
+        _validate_cpu_flag()
+        _validate_kernel_option()
+
+    def setup_test():
+        """
+        Setup the environment:
+        1. install require packages
+        """
+        if req_cmds:
+            req_pkgs = [cmd_info["package"] for cmd_info in req_cmds.values()]
+            if not utils_package.package_install(req_pkgs):
+                test.error("Fail to install packages '%s'" % req_pkgs)
+
+    def run_test():
+        """
+        Test steps
+        1. Check expected kernel msg
+        2. Check specific tool output
+        3. Check virsh domcapabilities output
+        """
+        test.log.info("TEST_STEP1: Check expected kernel msg")
+        kernel_msg_cmd = params.get("kernel_msg_cmd")
+        kernel_msg_patterns = eval(params.get("kernel_msg_patterns", "[]"))
+        result = process.run(kernel_msg_cmd, shell=True)
+        libvirt.check_result(result, expected_match=kernel_msg_patterns)
+
+        test.log.info("TEST_STEP2: Check specific tool output")
+        if req_cmds:
+            for cmd, cmd_info in req_cmds.items():
+                pkg_patterns = eval(params.get("%s_patterns" % cmd, "[]"))
+                if pkg_patterns:
+                    pkg_cmd = "%s %s" % (cmd, cmd_info["cmd_params"])
+                    result = process.run(pkg_cmd, shell=True)
+                    for p_pattern in pkg_patterns:
+                        libvirt.check_result(result, expected_match=p_pattern)
+
+        test.log.info("TEST_STEP3: Check virsh domcapabilities output")
+        domcap_xpath = eval(params.get("domcap_xpath", "[]"))
+        if domcap_xpath:
+            domcap_xml = domcapability_xml.DomCapabilityXML()
+            libvirt_vmxml.check_guest_xml_by_xpaths(domcap_xml, domcap_xpath)
+
+    libvirt_version.is_libvirt_feature_supported(params)
+    secure_feature = params.get("secure_feature")
+    req_cmds = eval(params.get("req_cmds", "{}"))
+
+    validate_prerequisites()
+    setup_test()
+    run_test()