Usage#

To run the cc_admin module, use the following command:

python3 -m verifier.cc_admin [-h] [-v] [--test_no_gpu] [--driver_rim DRIVER_RIM] [--vbios_rim VBIOS_RIM] [--user_mode] [--nonce] [--allow_hold_cert]

Option

Description

-h, --help

Show this help message and exit

-v, --verbose

Print more detailed output

--test_no_gpu

If there is no GPU and we need to test the verifier, no NVML APIs will be available, so the verifier will use hardcoded GPU info

--driver_rim DRIVER_RIM

The path to the driver RIM. If not provided, it will use the default file: /usr/share/nvidia/rim/RIM_GH100PROD.swidtag

--vbios_rim VBIOS_RIM

The path to the VBIOS RIM. If not provided, it will try to find the appropriate file in verifier_cc/samples/ directory for the VBIOS ROM flashed onto the GPU

--user_mode

Runs the GPU attestation in user mode

--allow_hold_cert

Continue attestation if the OCSP revocation status of the certificate in the RIM files is ‘certificate_hold’

--nonce

Specify a Nonce for Attestation Report

--rim_root_cert RIM_ROOT_CERT

The absolute path to the root certificate is to be used for verifying the certificate chain of the driver and VBIOS RIM certificate chain

--rim_service_url RIM_SERVICE_URL

The URL to be used for fetching driver and VBIOS RIM files (e.g., https://rim.attestation.nvidia.com/v1/rim)

--ocsp_url OCSP_SERVICE_URL

The URL to be used for checking the revocation status of a certificate (e.g., https://ocsp.ndis.nvidia.com/)

--ocsp_nonce_disabled

Flag which indicates whether to include a nonce when calling OCSP. Only applicable for local GPU attestation. False by default

--service-key

Service key which is used to auth remote service calls to attestation services. None by default. Note: No valid service keys have been created by admins yet - using any key will result in attestation failure.

--claims_version

Specify the claims version to retrieve version-specific attestation claims (e.g., 2.0). Please refer to the Claims Guide for the claims. If the claims version is not set, it defaults to 2.0.

If you need information about any function, use

help(function_name)

For example:

e.g. help(verify_measurement_signature)

Claims and Troubleshooting information#

On this page