attestation

The command manages workload attestation in the vHSM system. It supports both local and remote attestation.

Usage

vhsm nitride attestation <subcommand> [options]

Subcommands

• create @values.json: Create a new workload attestation configuration

• read $workload: Read details of a specific workload attestation

• update @values.json: Update an existing workload attestation configuration

• delete $workload: Delete a specific workload attestation

• list: List all workload attestations

• dump: Dump attestation data

• local report=@report.json nonce=$nonce @policy.json: Perform local attestation verification

• report $workload: Generate or verify attestation reports for a workload

• nonce $workload: Generate a nonce for attestation

• generate $nonce: Generate attestation locally

• verify $workload report=@report.base64  Verify an attestation report

Next Steps

Learn more about the subcommands

• create

• delete

• dump

• generate

• local

• list

• nonce

• read

• update

• verify