The local enclave runs in the same process as the transaction manager, but there is still logical separation between the enclave and transaction manager.
You can configure a local enclave.
Remote HTTP enclave
The remote HTTP enclave serves RESTful endpoints over HTTP and runs as a separate process to the transaction manager. This provides greater separation between the enclave and transaction manager.
For additional security, the remote HTTP enclave can be deployed in a secure environment separate from the transaction manager.
The enclave must be present and running at transaction manager startup. You can configure a remote HTTP enclave.