Remote Attestation and IAS

[SAM_R_2]

Hi,

If the enclave is first launched in machine A, it sends the quote to user and user stores it. When the enclave is launched in machine B, previous quote is invalid. Is connecting to IAS necessary again in this situation?

Is it possible that Intel allows so many end users to use IAS?

Is it possible that Intel allows some other companies to do the IAS work?

-Thanks 

[Surenthar_S_Intel · Accepted solution]

Hi Sam,

• If the enclave is first launched in machine A, it sends the quote to user and user stores it. When the enclave is launched in machine B, previous quote is invalid. Is connecting to IAS necessary again in this situation?

                          Yes, connecting to IAS is necessary. when the enclave is launched in machine B, there is no “previous quote” unless the enclave has attested before.

• Is it possible that Intel allows so many end users to use IAS?

                          Yes, Intel allows so many enclave to use IAS. Quotes are per enclave, not per user.

• Is it possible that Intel allows some other companies to do the IAS work?

                          No, Intel doesn’t allows some other companies to do the IAS work.

Thanks and Reagrds,
Surenthar Selvaraj

[SAM_R_2]

Thanks for your information