Validation for ratsd lead attester and leaf attesters

[cowbon]

The diagram in the Wiki shows an aCSR agent issues an sKey to the lead attester. How is this aCSR agent connected to the CA (CCC)? And how about the leaf attesters?

[thomas-fossati]

The diagram in the Wiki shows an aCSR agent issues an sKey to the lead attester.

Correct.

In more detail, what I think should happen is that on startup, the aCSR agent shall:

• 1(A) Create a keypair <sKey, pKey>;
• 2(A) Request evidence E for the “complete” system (platform, workload, maybe DA, etc.);
• 3(A) Create an aCSR for pKey, add E, any identifying information (e.g., SAN) and sign it with sKey;
• 4(A) Use the enrollment protocol supported by the CA (e.g., CMP, SCEP, EST, ACME, etc.) to submit the aCSR.

The CA shall:

• 1(V) Receive the aCSR;
• 2(V) Extract E and ask its verifier to appraise it;
• 3(V) On success, a certificate is issued for pKey and returned to the aCSR agent.

The aCSR agent shall:

• 5(A) Install the certificate;
• 6(A) Notify ratsd to reload the active cert.

On a regular interval, the aCSR agent will repeat steps 2(A)-6(A)

How is this aCSR agent connected to the CA (CCC)?

See 4(A) above.

(Not sure what CCC means, though.)

And how about the leaf attesters?

The assumption is that the lead attester, all component attesters, and any relevant configuration are measured as part of the workload and, therefore, are factored into the workload-related evidence submitted to the attesting CA.

[cowbon]

The diagram in the Wiki shows an aCSR agent issues an sKey to the lead attester.

Correct.

In more detail, what I think should happen is that on startup, the aCSR agent shall:

• 1(A) Create a keypair <sKey, pKey>;
• 2(A) Request evidence E for the “complete” system (platform, workload, maybe DA, etc.);
• 3(A) Create an aCSR for pKey, add E, any identifying information (e.g., SAN) and sign it with sKey;
• 4(A) Use the enrollment protocol supported by the CA (e.g., CMP, SCEP, EST, ACME, etc.) to submit the aCSR.

The CA shall:

• 1(V) Receive the aCSR;
• 2(V) Extract E and ask its verifier to appraise it;
• 3(V) On success, a certificate is issued for pKey and returned to the aCSR agent.

The aCSR agent shall:

• 5(A) Install the certificate;
• 6(A) Notify ratsd to reload the active cert.

On a regular interval, the aCSR agent will repeat steps 2(A)-6(A)

How is this aCSR agent connected to the CA (CCC)?

See 4(A) above.

(Not sure what CCC means, though.)

And how about the leaf attesters?

The assumption is that the lead attester, all component attesters, and any relevant configuration are measured as part of the workload and, therefore, are factored into the workload-related evidence submitted to the attesting CA.

I meant Confidential Computing Consortium, or any party whose endorsement may make ratsd considered as trusted, such as IETF