how to get values for PCK certificate in remote attestation

[Hszz09]

https://api.portal.trustedservices.intel.com/documentation#pcs-certificate

As said in this URL, use curl to pass some values to Intel. However, how can I get the values such as Ocp-Apim-Subscription-Key, encrypted_ppid, cpusvn, pcesvn, pceid.

Is there any script available?

Thanks!

[Hszz09]

problem solved

[Shefali_K_Intel]

Hi,

I am able to get all the pre-requisites needed for PCK Certificate downloading. I got Ocp-Apim-Subscription-Key, encrypted_ppid, cpusvn, pcesvn, pceid. However when I run curl command for retrieval I always get 404 Resource not found. Do you have any idea how to resolve it ??

{ "statusCode": 404, "message": "Resource not found" }

Thanks,

[Pratama__Denny_April]

HI @Hszz09,

you said that problem solved, may I know how do you get the encrypted_ppid, cpusvn, pcesvn, pceid ?

[Akhtar__Maham]

Hi can you please share how you solved this problem @Hszz09 ??

[Primawan__Andy]

Hi all,

so, how we can get those values?

1. encrypted_ppid
2. cpusvn
3. pcesvn
4. pceid

[Primawan__Andy]

I just write a guide to get those values:

1. encrypted_ppid
2. cpusvn
3. pcesvn
4. pceid

You can read the guide in here:

https://github.com/on-premise-signal/signal-setup-guide/blob/master/README.md#get-intel-sgx-pck-certificate

[Sturmann__Lilian]

The PPID, CPUSVN, PCESVN, PCEID can be retrieved by downloading and running Intel's PCK ID Retrieval Tool on an SGX-capable machine.

The subscription key is obtained by registering for it with Intel.

The API for retrieving the PCK cert will give an invalid key error if you leave the {brackets} around the subscription key. However, you should leave brackets around the PPID, CPUSVN, PCESVN, PCEID.

The SDK and PSW are not necessary for retrieving these values.