Nitride
HomeDocumentationTutorials
  • Nitride
  • Documentation
    • What is Nitride?
    • Use Cases
    • Setup
      • Install Nitride
      • Configure
    • Get Started
      • Attesting a MariaDB database with Cloud-Init
    • Concepts
      • Attestation
        • AMD SEV PKI
        • Intel TDX PKI
      • enclaivelet
    • Supported Technologies
  • Tutorials
    • Create identities and policies
    • Attesting a buckypaper VM
  • Developers
    • API
      • Overview
      • Identities
      • Policies
      • Totp
      • Attestations
      • Logs
      • Config
      • Annotations
  • CLI
    • Enable Auth
    • Register Identities
    • Create Policy
    • Create Attestation
    • Enable Namespacing
  • Resources
    • Blog
    • GitHub
    • Youtube
    • CCx101
Powered by GitBook
On this page

Was this helpful?

  1. Developers
  2. API

Attestation Lifecyle Management

Last updated 1 year ago

Was this helpful?

Get a one-time token

The endpoint creates an update token, which is a one-time token that allows the update of a specific image. Administrators use the token to perform an automatic update.

Ask for challenge nonce

The endpoint creates a nonce used in the challenge response with the security platform. This endpoint is identical to the attestation nonce.

Verify attestation report

This endpoint verifies an update quote where possible and stores differing values for the image specified during token creation. Measurements and Image values can be updated at the same time or separately.

  • Get a one-time token
  • POST/update/create
  • Ask for challenge nonce
  • POST/update/nonce
  • Verify attestation report
  • POST/update/verify
post
Body
imagestringOptional
allow_measurementbooleanOptional
Responses
200
Create OTT
application/json
post
POST /v1/auth/ratls/update/create HTTP/1.1
Host: localhost:8200
Content-Type: application/json
Accept: */*
Content-Length: 41

{
  "image": "text",
  "allow_measurement": true
}
200

Create OTT

{
  "data": {
    "ott": "text"
  }
}
post
Body
imagestringRequired
Responses
200
Created Nonce
application/json
post
POST /v1/auth/ratls/update/nonce HTTP/1.1
Host: localhost:8200
Content-Type: application/json
Accept: */*
Content-Length: 16

{
  "image": "text"
}
200

Created Nonce

{
  "data": {
    "nonce": "text"
  }
}
post
Body
quotestringRequired
ottstringRequired
Responses
200
No required information
application/json
post
POST /v1/auth/ratls/update/verify HTTP/1.1
Host: localhost:8200
Content-Type: application/json
Accept: */*
Content-Length: 29

{
  "quote": "text",
  "ott": "text"
}
200

No required information

{
  "data": {}
}