Attestation - Attest Sev Snp Vm
Attest to an SEV SNP Virtual Machine.
Processes a SEV SNP Boot chain. The type of artifact produced is dependent upon attestation policy.
POST {instanceUrl}/attest/SevSnpVm?api-version=2022-08-01
URI Parameters
Name | In | Required | Type | Description |
---|---|---|---|---|
instance
|
path | True |
string |
The attestation instance base URI, for example https://mytenant.attest.azure.net. |
api-version
|
query | True |
string |
Client API version. Current version is 2022-08-01 |
Request Body
Name | Type | Description |
---|---|---|
draftPolicyForAttestation |
string |
Attest against the provided draft policy. Note that the resulting token cannot be validated. |
initTimeData |
Initialization data provided by the enclave at the time of report generation. The MAA will verify that the init time data is known to the attestation target. |
|
nonce |
string |
Nonce for incoming request - emitted in the generated attestation token |
report |
string |
Hardware rooted report of the virtual machine being attested along with the signing certificate chain and optionally, additional endorsements |
runtimeData |
Runtime data provided by the enclave at the time of report generation. The MAA will verify that the run time data is known to the attestation target. |
Responses
Name | Type | Description |
---|---|---|
200 OK |
Success |
|
Other Status Codes |
Error response describing why the operation failed |
Examples
Attest SevSnpVm
Sample request
POST https://instance.attest.azure.net/attest/SevSnpVm?api-version=2022-08-01
{
"report": "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",
"runtimeData": {
"data": "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",
"dataType": "JSON"
}
}
Sample response
{
"token": "eyJhbGciOiJSUzI1NiIsImprdSI6Imh0dHBzOi8vdGVuYW50dGVzdHMudXMvY2VydHMiLCJraWQiOiJOaUJuRTFGK21tbGZRZUloeURiUXNVUjlXUzZkUlBYOWRYbUhEblpvRXBVPSIsInR5cCI6IkpXVCJ9.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.Aa-X1qkcUuAFkxD8LWSaaN5q-NUSywoNZh1nvuE_KEMY7VKlcBlN7vtH6kL30E0NE31QTUyZ3pPWe2mdS-uTGoJK6Woxt5KPHQF9iz5Blwh8UDDGyq7shx8RmDt9fL1da2b4A8EQz-ioZiLGpJVSSdeb8bJQOpLzm-9UKt5dAW9mI7Z5Rv_OTclBdcRU4N-nOsG3u5fh6GsjEQ_K2RTDn0ZcGDy0SqrwChyfY4FXLrzyxProHtK-3_24Z9y1WVvE6pd2qyhKz3J3p-VE3OOFsHDcnl6SDOp3r2MpfKyj6G1O2JYRt6BxanR7MnHkp3FECEg9NAyjp-fSW3C_-L5uSQ"
}
Definitions
Name | Description |
---|---|
Attestation |
The result of an attestation operation |
Attest |
Attestation request for AMD SEV SNP Virtual Machine |
Cloud |
An error response from Attestation. |
Cloud |
An error response from Attestation. |
Data |
Specifies the type of the data encoded contained within the "data" field of a "RuntimeData" or "InitTimeData" object |
Init |
Initialization time data are a conduit for any configuration information that is unknown when building the Trusted Execution Environment (TEE) and is defined at TEE launch time. This data can be used with confidential container or VM scenarios to capture configuration settings such as disk volume content, network configuration, etc. |
Runtime |
Runtime data are a conduit for any information defined by the Trusted Execution Environment (TEE) when actually running. |
AttestationResponse
The result of an attestation operation
Name | Type | Description |
---|---|---|
token |
string |
An RFC 7519 JSON Web Token, the body of which is an AttestationResult object. |
AttestSevSnpVmRequest
Attestation request for AMD SEV SNP Virtual Machine
Name | Type | Description |
---|---|---|
draftPolicyForAttestation |
string |
Attest against the provided draft policy. Note that the resulting token cannot be validated. |
initTimeData |
Initialization data provided by the enclave at the time of report generation. The MAA will verify that the init time data is known to the attestation target. |
|
nonce |
string |
Nonce for incoming request - emitted in the generated attestation token |
report |
string |
Hardware rooted report of the virtual machine being attested along with the signing certificate chain and optionally, additional endorsements |
runtimeData |
Runtime data provided by the enclave at the time of report generation. The MAA will verify that the run time data is known to the attestation target. |
CloudError
An error response from Attestation.
Name | Type | Description |
---|---|---|
error |
An error response from Attestation. |
CloudErrorBody
An error response from Attestation.
Name | Type | Description |
---|---|---|
code |
string |
An identifier for the error. Codes are invariant and are intended to be consumed programmatically. |
message |
string |
A message describing the error, intended to be suitable for displaying in a user interface. |
DataType
Specifies the type of the data encoded contained within the "data" field of a "RuntimeData" or "InitTimeData" object
Name | Type | Description |
---|---|---|
Binary |
string |
The field's content should be treated as binary and not interpreted by MAA. |
JSON |
string |
The field's content should be treated as UTF-8 JSON text that may be further interpreted by MAA. Refer to RFC 8259 for a description of JSON serialization standards for interoperability. |
InitTimeData
Initialization time data are a conduit for any configuration information that is unknown when building the Trusted Execution Environment (TEE) and is defined at TEE launch time. This data can be used with confidential container or VM scenarios to capture configuration settings such as disk volume content, network configuration, etc.
Name | Type | Description |
---|---|---|
data |
string |
Initialization time data are passed into the Trusted Execution Environment (TEE) when it is created. For an Icelake SGX quote, the SHA256 hash of the InitTimeData must match the lower 32 bytes of the quote's "config id" attribute. For a SEV-SNP quote, the SHA256 hash of the InitTimeData must match the quote's "host data" attribute. |
dataType |
The type of data contained within the "data" field |
RuntimeData
Runtime data are a conduit for any information defined by the Trusted Execution Environment (TEE) when actually running.
Name | Type | Description |
---|---|---|
data |
string |
Runtime data are generated by the Trusted Execution Environment (TEE). For an SGX quote (Coffeelake or Icelake), the SHA256 hash of the RuntimeData must match the lower 32 bytes of the quote's "report data" attribute. For a SEV-SNP quote, the SHA256 hash of the RuntimeData must match the quote's "report data" attribute. |
dataType |
The type of data contained within the "data" field |