How to get certificates from Intel PCS without PCCS

Intel® Software Guard Extensions (Intel® SGX)

Discussion board focused on hardware-based isolation and memory encryption to provide extended code protection in solutions.

How to get certificates from Intel PCS without PCCS

587 Views

Hi,

Currently the way attestation works for me is that you install PCCS and run the attestation to get the certificates from Intel PCS via config file.

Something like below:

/opt/intel/sgx-dcap-pccs/config/default.json

"uri": "https://sbx.api.trustedservices.intel.com/sgx/certification/v4/",

"ApiKey" : "< Primary Key from https://sbx.api.portal.trustedservices.intel.com/manage-subscriptions>",

Is there a way to get the certificates directly from Intel PCS services without having the PCCS installed in our VM?

All the instructions I have seen are using PCCS mechanism only.

Are there any instructions documented to get the Certificates without PCCS?

Thanks

Link Copied

0 Replies

Community support is provided during standard business hours (Monday to Friday 7AM - 5PM PST). Other contact methods are available here.

Intel does not verify all solutions, including but not limited to any file transfers that may appear in this community. Accordingly, Intel disclaims all express and implied warranties, including without limitation, the implied warranties of merchantability, fitness for a particular purpose, and non-infringement, as well as any warranty arising from course of performance, course of dealing, or usage in trade.

For more complete information about compiler optimizations, see our Optimization Notice.