# Nitride

## Nitride

- [Nitride](https://docs.enclaive.cloud/nitride/nitride.md): Manage identities of confidential VMs and k8s containers, define workload-based access control, secure access to secrets, and pave the way to confidential computing.
- [Documentation](https://docs.enclaive.cloud/nitride/documentation.md)
- [What is Nitride?](https://docs.enclaive.cloud/nitride/documentation/what-is-nitride.md)
- [How it works?](https://docs.enclaive.cloud/nitride/documentation/how-it-works.md)
- [Use Case](https://docs.enclaive.cloud/nitride/documentation/use-case.md)
- [Setup](https://docs.enclaive.cloud/nitride/documentation/setup.md)
- [Install Nitride](https://docs.enclaive.cloud/nitride/documentation/setup/install-nitride.md): Install Nitride and securely integrate it into your environment, ensuring that workloads are verifiably trusted before granting access.
- [Install the CLI](https://docs.enclaive.cloud/nitride/documentation/setup/install-the-cli.md)
- [Initialize](https://docs.enclaive.cloud/nitride/documentation/setup/initialize.md): Init Nitride and implement custom authentication and authorization mechanisms.
- [Getting Started](https://docs.enclaive.cloud/nitride/documentation/getting-started.md)
- [Hello "attestation" world](https://docs.enclaive.cloud/nitride/documentation/getting-started/hello-attestation-world.md): Learn to make your first "local" attestation from within the enclaved workload.
- [Remote attestation](https://docs.enclaive.cloud/nitride/documentation/getting-started/remote-attestation.md): Learn how to make a "remote" attestation workflow using the CLI commands.
- [Setup](https://docs.enclaive.cloud/nitride/documentation/getting-started/remote-attestation/setup.md): Learn how to do a remote attestation using vHSM nitride. You need to create an attestation policy on the verifier.
- [Generate a Nonce](https://docs.enclaive.cloud/nitride/documentation/getting-started/remote-attestation/generate-a-nonce.md): Learn to generate nonce on the verifier
- [Generate a Report](https://docs.enclaive.cloud/nitride/documentation/getting-started/remote-attestation/generate-a-report.md): Learn to generate an attestation report for a workload on your VM
- [Verify the report](https://docs.enclaive.cloud/nitride/documentation/getting-started/remote-attestation/verify-the-report.md): Learn to verify the attestation report that was generated by the provider.
- [Concepts](https://docs.enclaive.cloud/nitride/documentation/concepts.md): Learn about the basic concepts around creating, attesting, verifying and updating workload identities, identifying not only a machine but also its code.
- [Annotations](https://docs.enclaive.cloud/nitride/documentation/concepts/annotations.md): Learn more about annotations for Attestation Reporting.
- [Attestation](https://docs.enclaive.cloud/nitride/documentation/concepts/attestation.md): Learn the basic concept of remote attestation.
- [Protocols](https://docs.enclaive.cloud/nitride/documentation/concepts/attestation/protocols.md)
- [PKI](https://docs.enclaive.cloud/nitride/documentation/concepts/attestation/pki.md)
- [AMD SEV](https://docs.enclaive.cloud/nitride/documentation/concepts/attestation/pki/amd-sev.md): In this article we discuss the public key infrastracture related to AMD SEV technology.
- [Intel TDX](https://docs.enclaive.cloud/nitride/documentation/concepts/attestation/pki/intel-tdx.md)
- [Methods](https://docs.enclaive.cloud/nitride/documentation/concepts/attestation/methods.md): Understand about the various types of attestation methods along some examples.
- [Raw Attestation](https://docs.enclaive.cloud/nitride/documentation/concepts/attestation/methods/raw-attestation.md): Raw is the basic form of remote attestation, protecting the integrity of the platform and virtualized (UEFI).
- [Raw Attestation with Secure Boot](https://docs.enclaive.cloud/nitride/documentation/concepts/attestation/methods/raw-attestation-with-secure-boot.md): The attestation with Secure Boot resembles the principals of UEFI Secure Boot where the integrity of the UEFI is attested.
- [Raw Attestation with vTPM](https://docs.enclaive.cloud/nitride/documentation/concepts/attestation/methods/raw-attestation-with-vtpm.md): Understand about virtual Trusted Platform Module (vTPM) and how it works for various vendors.
- [Identity](https://docs.enclaive.cloud/nitride/documentation/concepts/identity.md): This section introduces the concept of workload identity and explains how it is implemented within the Nitride Platform.
- [Policy](https://docs.enclaive.cloud/nitride/documentation/concepts/policy.md): Learn more about policies to verify attestation claims.
- [TOTP](https://docs.enclaive.cloud/nitride/documentation/concepts/totp.md): Learn how to update attestations
- [Architecture](https://docs.enclaive.cloud/nitride/documentation/architecture.md)
- [CLI](https://docs.enclaive.cloud/nitride/documentation/architecture/cli.md): Learn more about the command line and its architecture
- [Nitride](https://docs.enclaive.cloud/nitride/documentation/architecture/nitride.md): Learn more about the Nitride Attestation framework and how to leverage the vHSM CLI as attestation agent
- [Supported Technologies](https://docs.enclaive.cloud/nitride/documentation/supported-technologies.md)
- [Tutorials](https://docs.enclaive.cloud/nitride/tutorials.md): Learn about using Nitride to attest a workload
- [Attestation Blueprint](https://docs.enclaive.cloud/nitride/tutorials/attestation-blueprint.md): Learn about namespace attestation
- [Login as root](https://docs.enclaive.cloud/nitride/tutorials/attestation-blueprint/login-as-root.md): Login as root user of the vHSM server
- [Create a namespace](https://docs.enclaive.cloud/nitride/tutorials/attestation-blueprint/create-a-namespace.md): Learn to create a namespace for the attestation
- [Initialize Nitride for the namespace](https://docs.enclaive.cloud/nitride/tutorials/attestation-blueprint/initialize-nitride-for-the-namespace.md): Learn to initialize the Nitride plugin in the namespace
- [Create Policy](https://docs.enclaive.cloud/nitride/tutorials/attestation-blueprint/create-policy.md): Learn to create a policy and register the policy
- [Create Identity](https://docs.enclaive.cloud/nitride/tutorials/attestation-blueprint/create-identity.md)
- [Create Attestation](https://docs.enclaive.cloud/nitride/tutorials/attestation-blueprint/create-attestation.md)
- [Update Attestation with TOTP](https://docs.enclaive.cloud/nitride/tutorials/attestation-blueprint/update-attestation-with-totp.md): Learn to add TOTP to the attestation
- [Create Annotations](https://docs.enclaive.cloud/nitride/tutorials/attestation-blueprint/create-annotations.md)
- [Get Firmware Measurement](https://docs.enclaive.cloud/nitride/tutorials/get-firmware-measurement.md): Learn to get the firmware measurement of the VM
- [Attestation Blueprint](https://docs.enclaive.cloud/nitride/tutorials/attestation-blueprint-1.md): unhide when done
- [Enable Namespacing](https://docs.enclaive.cloud/nitride/tutorials/attestation-blueprint-1/enable-namespacing.md): Learn to issue token for namespaces in a vHSM.
- [Register Identities](https://docs.enclaive.cloud/nitride/tutorials/attestation-blueprint-1/register-identities.md): Learn to register identities that are critical for enabling secure workload attestation and enforcing policies based on the trustworthiness of the underlying platform, firmware, and workload.
- [Create Attestation](https://docs.enclaive.cloud/nitride/tutorials/attestation-blueprint-1/create-attestation.md): Learn to create an attestation profile in vHSM using the CLI to enable trusted workload execution based on identity and access policies.
- [Create Policy](https://docs.enclaive.cloud/nitride/tutorials/attestation-blueprint-1/create-policy.md): Learn to create a policy in vHSM that defines what actions an attested identity can perform after successful remote attestation.
- [Create or update identities](https://docs.enclaive.cloud/nitride/tutorials/attestation-blueprint-1/create-or-update-identities.md): Learn to create or update identities
- [Create or update policies](https://docs.enclaive.cloud/nitride/tutorials/attestation-blueprint-1/create-or-update-policies.md)
- [Verify identities and policies locally](https://docs.enclaive.cloud/nitride/tutorials/attestation-blueprint-1/verify-identities-and-policies-locally.md): Learn to create a attestation for a workload and verify the UUID locally.
- [List Nitride identities, attestations, and policies](https://docs.enclaive.cloud/nitride/tutorials/attestation-blueprint-1/list-nitride-identities-attestations-and-policies.md): Learn to list the default identities, attestations, and policies
- [Create identities and policies](https://docs.enclaive.cloud/nitride/tutorials/attestation-blueprint-1/create-identities-and-policies.md)
- [Attesting a buckypaper VM](https://docs.enclaive.cloud/nitride/tutorials/attesting-a-buckypaper-vm.md)
- [Provisioning MariaDB Password on Azure DCXas\_v5 VM](https://docs.enclaive.cloud/nitride/tutorials/provisioning-mariadb-password-on-azure-dcxas_v5-vm.md): This tutorial guides you through provisioning a MariaDB container on a confidential buckypaper VM in Azure. The steps can be easily adapted for any cloud service provider that supports buckypaper.
- [OUTDATED Provisioning SSH keys](https://docs.enclaive.cloud/nitride/tutorials/outdated-provisioning-ssh-keys.md)
- [OUTDATED Provisioning kubeconfig](https://docs.enclaive.cloud/nitride/tutorials/outdated-provisioning-kubeconfig.md)
- [vHSM Agent](https://docs.enclaive.cloud/nitride/tutorials/vhsm-agent.md): Learn about vHSM agent and how it can help you with secure access to secrets and cryptographic operations managed by a vHSM.
- [vHSM Agent Configurations](https://docs.enclaive.cloud/nitride/tutorials/vhsm-agent/vhsm-agent-configurations.md)
- [auto\_auth](https://docs.enclaive.cloud/nitride/tutorials/vhsm-agent/vhsm-agent-configurations/auto_auth.md): Learn about the various parameters in the auto\_auth block of the configuration file.
- [template\_config](https://docs.enclaive.cloud/nitride/tutorials/vhsm-agent/vhsm-agent-configurations/template_config.md): Learn about setting global defaults for the templating engine.
- [template](https://docs.enclaive.cloud/nitride/tutorials/vhsm-agent/vhsm-agent-configurations/template.md): Learn about configuring the vHSM Agent to fetch secrets and render them into files.
- [trustlet](https://docs.enclaive.cloud/nitride/tutorials/vhsm-agent/vhsm-agent-configurations/trustlet.md): Learn about using trustlet to perform actions through a vHSM agent.
- [CLI](https://docs.enclaive.cloud/nitride/cli.md): This guide helps you initialize and configure Nitride using the vhsm CLI. It covers authentication, workload identity management, attestation policies, and namespaced token support.
- [nitride](https://docs.enclaive.cloud/nitride/cli/nitride.md)
- [annotation](https://docs.enclaive.cloud/nitride/cli/annotation.md): Add human-readable labels to raw attestation values (hashes, PCRs, measurements), so operators can understand what a value means.
- [create](https://docs.enclaive.cloud/nitride/cli/annotation/create.md): This command creates  an annotation to associate a human-readable description or value with a specific technical attestation key.
- [read](https://docs.enclaive.cloud/nitride/cli/annotation/read.md): Learn to retrieve a previously created annotation for a given attestation value.
- [update](https://docs.enclaive.cloud/nitride/cli/annotation/update.md): Learn to modify or update the human‑readable label for an existing attestation value.
- [delete](https://docs.enclaive.cloud/nitride/cli/annotation/delete.md): Remove an annotation for a given attestation key.
- [list](https://docs.enclaive.cloud/nitride/cli/annotation/list.md): List all stored annotation keys
- [attestation](https://docs.enclaive.cloud/nitride/cli/attestation.md): The command manages workload attestation in the vHSM system. It supports both local and remote attestation.
- [create@](https://docs.enclaive.cloud/nitride/cli/attestation/create.md): Creates a new workload attestation configuration. The attestation definition must be provided as a JSON file @values.json.
- [delete](https://docs.enclaive.cloud/nitride/cli/attestation/delete.md): Deletes a workload attestation.
- [dump](https://docs.enclaive.cloud/nitride/cli/attestation/dump.md): Performs local attestation operations without requiring a connection to the vHSM server. Note, report is not verified.
- [decode](https://docs.enclaive.cloud/nitride/cli/attestation/decode.md): Decode and display an attestation report in human-readable format.
- [generate](https://docs.enclaive.cloud/nitride/cli/attestation/generate.md): Generates an attestation report locally for a given nonce.
- [local](https://docs.enclaive.cloud/nitride/cli/attestation/local.md): Performs local attestation operations without requiring a connection to the vHSM server.
- [list](https://docs.enclaive.cloud/nitride/cli/attestation/list.md): Lists all attestations in the vHSM system.
- [nonce](https://docs.enclaive.cloud/nitride/cli/attestation/nonce.md): Generates a nonce for a specific workload attestation. A nonce is a random value used to ensure freshness and prevent replay attacks during attestation.
- [read](https://docs.enclaive.cloud/nitride/cli/attestation/read.md): Reads the details of a workload attestation.
- [update](https://docs.enclaive.cloud/nitride/cli/attestation/update.md): Updates an existing workload attestation configuration.
- [verify](https://docs.enclaive.cloud/nitride/cli/attestation/verify.md): Verifies an attestation report for a specific workload using the vHSM server.
- [config](https://docs.enclaive.cloud/nitride/cli/config.md): This command helps you to read the current settings of the Nitride plugin at the mount.
- [read](https://docs.enclaive.cloud/nitride/cli/config/read.md): Reads the global configuration for the Nitride plugin.
- [identity](https://docs.enclaive.cloud/nitride/cli/identity.md)
- [create](https://docs.enclaive.cloud/nitride/cli/identity/create.md)
- [read](https://docs.enclaive.cloud/nitride/cli/identity/read.md): Read the details of the identities that you created
- [delete](https://docs.enclaive.cloud/nitride/cli/identity/delete.md)
- [list](https://docs.enclaive.cloud/nitride/cli/identity/list.md): View the different identities that you created.
- [init](https://docs.enclaive.cloud/nitride/cli/init.md): The command performs a series of operations to configure and secure your environment: Creates essential Nitride identities and attaches a policy.
- [log](https://docs.enclaive.cloud/nitride/cli/log.md): The command manages attestation and event logs in the vHSM system. Logs record attestation events and other actions performed by workloads, providing an auditable history for security and compliance.
- [read](https://docs.enclaive.cloud/nitride/cli/log/read.md)
- [delete](https://docs.enclaive.cloud/nitride/cli/log/delete.md)
- [list](https://docs.enclaive.cloud/nitride/cli/log/list.md)
- [policy](https://docs.enclaive.cloud/nitride/cli/policy.md)
- [create](https://docs.enclaive.cloud/nitride/cli/policy/create.md)
- [read](https://docs.enclaive.cloud/nitride/cli/policy/read.md)
- [update](https://docs.enclaive.cloud/nitride/cli/policy/update.md)
- [delete](https://docs.enclaive.cloud/nitride/cli/policy/delete.md)
- [list](https://docs.enclaive.cloud/nitride/cli/policy/list.md)
- [totp](https://docs.enclaive.cloud/nitride/cli/totp.md)
- [create](https://docs.enclaive.cloud/nitride/cli/totp/create.md)
- [delete](https://docs.enclaive.cloud/nitride/cli/totp/delete.md): Deletes a specific Time-based One-Time Password token.
- [API](https://docs.enclaive.cloud/nitride/api.md)
- [Annotations](https://docs.enclaive.cloud/nitride/api/annotations.md)
- [Attestations](https://docs.enclaive.cloud/nitride/api/attestations.md)
- [Configuration](https://docs.enclaive.cloud/nitride/api/configuration.md)
- [Identities](https://docs.enclaive.cloud/nitride/api/identities.md)
- [Logs](https://docs.enclaive.cloud/nitride/api/logs.md)
- [Policies](https://docs.enclaive.cloud/nitride/api/policies.md)
- [TOTP](https://docs.enclaive.cloud/nitride/api/totp.md)
- [Models](https://docs.enclaive.cloud/nitride/api/models.md)