determining by a trusted orchestrator service that a communication processing load of a common function supported by at least one virtual server executing in a NFV core network is greater than a predefined processing load threshold, where the trusted orchestrator service is an application that executes in a trusted security zone of a first physical host that provides hardware assisted security;

in response to the determination of the processing load being greater than the predefined processing load threshold, creating by the trusted orchestrator service a second virtual server on a second physical host that provides hardware assisted security;

requesting by the trusted orchestrator service a plurality of trust keys from a trusted repository of trust keys, wherein the trusted orchestrator service communicates over a trusted end-to-end communication link with the trusted repository of trust keys to obtain the plurality of trust keys;

initiating by the trusted orchestrator service at least one instance of the common function in the second virtual server, wherein the at least one instance of the common function is configured with at least one of the plurality of trust keys received from the trusted repository;

enabling by the trusted orchestrator service a trusted security zone of the second physical host; and

provisioning by the trusted orchestrator service the plurality of trusted keys into the enabled trusted security zone of the second physical host.