topic Testing Remote Attestation with curl in Intel® Software Guard Extensions (Intel® SGX)

Testing Remote Attestation with curl

jgnoonan — Sat, 29 Jun 2024 22:27:15 GMT

I am trying to test remote attestation using curl. I've generated a quote.dat but when I run the below command, I get the following results:

curl -X POST "https://api.trustedservices.intel.com/sgx/attestation/v4/report" -H "Ocp-Apim-Subscription-Key: <my primary key>" -H "Content-Type: application/json" --data-binary "@quote.dat"

{ "statusCode": 401, "message": "Access denied due to invalid subscription key. Make sure to provide a valid key for an active subscription."

I have subscribed to the following services on my Intel account:

Product Intel® Software Guard Extensions Provisioning Certification Service

Product DEV Intel® Software Guard Extensions Attestation Service (Linkable) subscription

Product Intel® Software Guard Extensions Registration Service subscription

I am using the Primary key from the second service on this list. What am I doing wrong?

Re: Testing Remote Attestation with curl

Scott_R_Intel — Mon, 01 Jul 2024 01:14:20 GMT

Hello.

Per the latest IAS documentation, to use the DEV environment, you must use the https://api.trustedservices.intel.com/sgx/dev base url, and also API version 5 is available. For example: https://api.trustedservices.intel.com/sgx/dev/attestation/v5/report

Regards.

Re: Testing Remote Attestation with curl

jgnoonan — Mon, 01 Jul 2024 13:33:44 GMT

@Scott_R_Intel Thank you so much for the quick response! That worked perfectly!