Intel® Software Guard Extensions (Intel® SGX)
Discussion board focused on hardware-based isolation and memory encryption to provide extended code protection in solutions.

how to get values for PCK certificate in remote attestation

Hszz09
Beginner
1,131 Views

https://api.portal.trustedservices.intel.com/documentation#pcs-certificate

As said in this URL, use curl to pass some values to Intel. However, how can I get the values such as Ocp-Apim-Subscription-Key, encrypted_ppid, cpusvn, pcesvn, pceid.

Is there any script available?

Thanks!

0 Kudos
7 Replies
Hszz09
Beginner
1,131 Views

problem solved

0 Kudos
Shefali_K_Intel
Employee
1,131 Views

Hi,

I am able to get all the pre-requisites needed for PCK Certificate downloading. I got Ocp-Apim-Subscription-Key, encrypted_ppid, cpusvn, pcesvn, pceid. However when I run curl command for retrieval I always get 404 Resource not found. Do you have any idea how to resolve it ??

{ "statusCode": 404, "message": "Resource not found" }

Thanks,

0 Kudos
Pratama__Denny_April
1,131 Views

HI @Hszz09,

you said that problem solved, may I know how do you get the encrypted_ppid, cpusvn, pcesvn, pceid ?

0 Kudos
Akhtar__Maham
Beginner
1,131 Views

Hi can you please share how you solved this problem @Hszz09 ??

 

0 Kudos
Primawan__Andy
Beginner
1,131 Views

Hi all,

so, how we can get those values?

  1. encrypted_ppid
  2. cpusvn
  3. pcesvn
  4. pceid

 

0 Kudos
Primawan__Andy
Beginner
1,131 Views

I just write a guide to get those values:

  1. encrypted_ppid
  2. cpusvn
  3. pcesvn
  4. pceid

 

You can read the guide in here:

https://github.com/on-premise-signal/signal-setup-guide/blob/master/README.md#get-intel-sgx-pck-certificate

 

 

0 Kudos
Sturmann__Lilian
Beginner
1,131 Views

The PPID, CPUSVN, PCESVN, PCEID can be retrieved by downloading and running Intel's PCK ID Retrieval Tool on an SGX-capable machine.

The subscription key is obtained by registering for it with Intel.

The API for retrieving the PCK cert will give an invalid key error if you leave the {brackets} around the subscription key. However, you should leave brackets around the PPID, CPUSVN, PCESVN, PCEID.

The SDK and PSW are not necessary for retrieving these values.

0 Kudos
Reply