topic Re: Do we need to Register Azure VM Platform for SGX Remote Attesation ? in Intel® Software Guard Extensions (Intel® SGX)

Do we need to Register Azure VM Platform for SGX Remote Attesation ?

Sirasapalli — Thu, 28 Nov 2024 08:46:44 GMT

Hi, I have setup Azure Attestation Provider, and trying to run an application, with configuration below

"pccs_url": "https://<<attestation url>>/certs",

"use_secure_cert": true,

"collateral_service": "https://<<attestation url>>/certs"

"local_pck_url": "https://<<attestation url>>/certs"

It always throws No Evidence provided on handshake data, and some time pckcert Wrong tag.

Can someone help what could the process to make the application run without errors?

Thanks

Re: Do we need to Register Azure VM Platform for SGX Remote Attesation ?

Scott_R_Intel — Mon, 02 Dec 2024 14:09:10 GMT

Hello.

If you're trying to download PCK Certs for Azure platforms directly from Intel, you cannot. You need to get the platform PCK Certs for Azure platforms from their THIMS service. Please refer to the config file linked below for the correct URLs:

https://github.com/intel/SGXDataCenterAttestationPrimitives/blob/main/QuoteGeneration/qcnl/linux/sgx_default_qcnl_azure.conf

Regards.