Getting Started#

This guide will help you set up and start using Corelib for GPU attestation evidence collection.

Prerequisites#

Hardware Requirements#

NVIDIA Blackwell architecture GPU
System with PCIe connectivity to the GPU

Software Requirements#

Root Access: Required for GPU device access
NVIDIA Attestation SDK: Version 1.1.0 or later
- For detailed installation instructions, see the nvattest Installation Guide.

Installation#

Navigate to NVIDIA Corelib Downloads here and select the desired architecture and operating system.
Follow the installation instructions to install Corelib.

Verify Installation#

Check CLI Version#

nvattest version

Make sure the version returned is >= 1.1

Quick Start#

Collect Evidence#

The simplest way to collect evidence using Corelib:

sudo nvattest collect-evidence \
  --gpu-evidence-source=corelib \
  --gpu-architecture=blackwell \
  --format=json

Note: You must run with sudo as Corelib requires root privileges to access GPU devices.

Understanding the Command#

--gpu-evidence-source=corelib: Specifies Corelib as the evidence source (instead of default NVML)
--gpu-architecture=blackwell: Required parameter specifying the GPU architecture
--format=json: Outputs evidence in JSON format for easy parsing

Collect Evidence with Custom Nonce#

For production use, always provide a nonce for replay protection:

NONCE="89671DA1658F2EE14F66F6EE7BBF6E48C4F3F4F405BD2F1BEDE6A61281CB131A"

sudo nvattest collect-evidence \
  --gpu-evidence-source=corelib \
  --nonce=$NONCE \
  --gpu-architecture=blackwell \
  --format=json

Expected Output#

The evidence output includes:

{
  "evidences": [
    {
      "arch": "BLACKWELL",
      "nonce": "89671DA1658F2EE14F66F6EE7BBF6E48C4F3F4F405BD2F1BEDE6A61281CB131A",
      "evidence": "EeAB...",
      "certificate": "LS0tLS1CRUdJTi..."
    }
  ],
  "result_code": 0,
  "result_message": "Ok"
}

Fields:

arch: GPU architecture (BLACKWELL)
nonce: The nonce used for this evidence collection
evidence: Base64-encoded attestation report
certificate: Base64-encoded certificate chain
result_code: 0 for success, non-zero for errors
result_message: Human-readable result description

Common First-Time Issues#

Permission Denied#

Problem: Error: Permission denied

Solution: Corelib requires root access. Run with sudo:

sudo nvattest collect-evidence --gpu-evidence-source=corelib --gpu-architecture=blackwell

Missing Architecture Parameter#

Problem: Error: --gpu-architecture is required when using --gpu-evidence-source=corelib

Solution: Always specify the GPU architecture:

sudo nvattest collect-evidence --gpu-evidence-source=corelib --gpu-architecture=blackwell

No GPUs Found#

Problem: Error: No devices found

Solution:

Verify Blackwell GPU is properly installed: lspci | grep -i nvidia