Nitride
HomeDocumentationTutorials
  • Nitride
  • Documentation
    • What is Nitride?
    • Use Case
    • Setup
      • Install Nitride
      • Configure
    • Get Started
      • Hello "attestation" world
    • Concepts
      • Attestation
        • Methods
          • Raw Attestation
          • Raw Attestation with Secure Boot
          • Raw Attestation with vTPM
        • PKI
          • AMD SEV
          • Intel TDX
      • vHSM CLI System
      • Policies, Identities, and Workloads
      • Annotations
    • Supported Technologies
  • Tutorials
    • List Nitride identities, attestations, and policies
    • Create or update identities
    • Create or update policies
    • Verify identities and policies locally
    • Attesting a buckypaper VM
    • Provisioning MariaDB Password on Azure DCXas_v5 VM
  • CLI
    • vhsm auth
      • Enable rATLS Auth Method
    • vhsm nitride
      • Enable Namespacing
      • Register Identities
      • Create Policy
      • Create Attestation
  • API
    • Annotations
    • Attestations
    • Configuration
    • Identities
    • Logs
    • Policies
    • TOTP
    • Models
  • Resources
    • Blog
    • GitHub
    • Youtube
    • CCx101
Powered by GitBook
On this page

Was this helpful?

  1. Documentation
  2. Concepts
  3. Attestation

Methods

Understand about the various types of attestation methods and the use cases.

Last updated 1 day ago

Was this helpful?

Note: Currently, there is no industry standard for remote attestation protocols. As a result, CPU vendors and Cloud Service Providers have each developed their own proprietary solutions.

The right attestation method depends entirely on what you need to prove. This section breaks down the most common approaches, helping you select the best one for your specific security goals and use cases.

Method
Scope of Verification
Description

Initial Firmware/CPU State

A low-level measurement from the CPU vendor's hardware.

Boot Chain

Verifies the bootloader and kernel against known measurements.

Runtime Environment

Measures applications, libraries, and configuration after the OS has booted.

Paravirtualized TPM

Runtime Environment

An interoperable alternative to a vTPM that uses standard drivers.

Raw Attestation
Secure Boot
Virtual TPM (vTPM)