topic Hi Shivani, in Intel® Software Guard Extensions (Intel® SGX)

Question about MTLS between SP and IAS?

shen_y_ — Wed, 06 Jul 2016 17:34:59 GMT

I've registered my SP with IAS and received a SPID and a Report Key link.

My question is :

1. Is the Report Key needed in MTLS or remote attestation? If true, how to use it ?

2. MTLS means that both SP and IAS must present a valid (not expired or revoked) X.509 certificate for authentication.I've provided SP's certificate to IAS and received a SPID,how to get IAS's certificate? In my opinion, I should put the IAS's certificate in SP's truststore used for TLS1.2 authentication when I access IAS WebService which is supplied for remote attestation. Is my understanding right?

Thanks and Regards,

Hi Yu,

Surenthar_S_Intel — Wed, 13 Jul 2016 04:05:00 GMT

Hi Yu,

We have a code sample for remote attestation that is nearing release. It should be ready soon. This sample has will likely address your question.

Thanks and Regards,
Surenthar Selvaraj

Remote Attestation sample now

Surenthar_S_Intel — Wed, 27 Jul 2016 03:54:16 GMT

Remote Attestation sample now live

https://software.intel.com/en-us/articles/intel-software-guard-extensions-remote-attestation-end-to-end-example

-Surenthar.

Hi Surenthar

shivani_g_ — Thu, 04 Aug 2016 19:37:38 GMT

Hi Surenthar

Will a code sample for remote attestation for linux OS will also be released soon ?

I was trying to communicate with SP directly via sockets. I'm able to successfully complete the TLS handshake. But after writing the request to socket my SSL_read() always fails and I'm unsure why.

Thank You

Hi Shivani,

Surenthar_S_Intel — Tue, 09 Aug 2016 06:44:52 GMT

Hi Shivani,

At this time there are no plans to provide a remote attestation sample for Linux OS.

Thanks