local

Performs local attestation operations without requiring a connection to the vHSM server.

Usage

vhsm nitride attestation local [email protected] nonce=<nonce> @policy.json [flags]

Performs attestation operations locally, including report verification, nonce generation, attestation generation, and verification.

Parameters

  • [email protected]: Path to the attestation report file to verify (the file must exist).

  • nonce=<nonce>: The nonce value used in the attestation.

  • @policy.json: Path to the policy file defining the attestation requirements (the file must exist).

Flags

Examples

Verify a local attestation report:

vhsm nitride attestation local [email protected] nonce=abc123 @policy.json

Additional Example:

Verify with base64 encoded report:

vhsm nitride attestation local [email protected] nonce=abc123 @policy.json -base64

Verify with custom output format:

vhsm nitride attestation local [email protected] nonce=abc123 @policy.json -format=json

Note:

  • The command performs local verification without requiring a vHSM server connection.

  • The @report.json syntax means the file is read and its contents are used for verification.

  • The @policy.json syntax means the file is read and its contents are used as the policy.

  • Both files must exist in the current directory or provide the full path.

  • Use the -base64 flag if the report is base64 encoded.

  • For more information about attesting locally, see Verify identities and policies locally.

Last updated

Was this helpful?