the PCK must signed by Intel? can i completely divorced intel when i run The third party attention?

[ke__liu]

when  run 3rd-party-attestation。can i completely divorced intel's service？can i signed PCK by myself?

[Scott_R_Intel]

Hello.

I think this was already answered on GitHub.  Please reply if you need more info.

Regards.

Scott

[ke__liu]

thanks . And When does this pck expire？What is the frequency of interaction with the intel pck service？

[JesusG_Intel]

Hello Liu,

The PCK certificates expire every 7 years. However, the evidence to validate the client platforms, i.e.  TCBInfo, QEIdentity, QVEIdentity and Certificate Revocation Lists, expires every 30 days. As a service owner, you should download these frequently to ensure you are attesting only the latest known compliant platforms.

Regards,

Jesus