Claims and Detached EAT schema#
This is the schema of the claims generated by the nvat_attest_device().
{
"$schema": "https://json-schema.org/draft/2020-12/schema",
"$id": "https://nvidia.com/schemas/attestation-claims.json",
"title": "NVIDIA Attestation Claims",
"description": "Schema for NVIDIA GPU and Switch attestation claims",
"type": "array",
"$defs": {
"measuresClaim": {
"type": "string",
"enum": ["Success", "Failure"],
"description": "Measurement validation result"
},
"certChainClaims": {
"type": "object",
"description": "Certificate chain validation claims",
"additionalProperties": true
},
"mismatchedMeasurement": {
"type": "object",
"description": "Details about mismatched measurements",
"additionalProperties": true
},
"gpuClaims": {
"type": "object",
"properties": {
"measres": {
"$ref": "#/$defs/measuresClaim"
},
"secboot": {
"oneOf": [
{ "type": "boolean" },
{ "type": "null" }
],
"description": "Secure boot status (optional)"
},
"dbgstat": {
"oneOf": [
{ "type": "string" },
{ "type": "null" }
],
"description": "Debug status (optional)"
},
"x-nvidia-device-type": {
"type": "string",
"const": "gpu",
"description": "Type of NVIDIA device"
},
"x-nvidia-mismatch-measurement-records": {
"oneOf": [
{
"type": "array",
"items": { "$ref": "#/$defs/mismatchedMeasurement" }
},
{ "type": "null" }
],
"description": "Records of mismatched measurements (optional)"
},
"x-nvidia-gpu-arch-check": {
"type": "boolean",
"description": "GPU architecture validation result"
},
"x-nvidia-gpu-driver-version": {
"type": "string",
"description": "GPU driver version"
},
"x-nvidia-gpu-vbios-version": {
"type": "string",
"description": "GPU VBIOS version"
},
"x-nvidia-gpu-attestation-report-cert-chain": {
"$ref": "#/$defs/certChainClaims"
},
"x-nvidia-gpu-attestation-report-cert-chain-fwid-match": {
"type": "boolean"
},
"x-nvidia-gpu-attestation-report-parsed": {
"type": "boolean"
},
"x-nvidia-gpu-attestation-report-nonce-match": {
"type": "boolean"
},
"x-nvidia-gpu-attestation-report-signature-verified": {
"type": "boolean"
},
"x-nvidia-gpu-driver-rim-fetched": {
"type": "boolean"
},
"x-nvidia-gpu-driver-rim-schema-validated": {
"type": "boolean"
},
"x-nvidia-gpu-driver-rim-cert-chain": {
"$ref": "#/$defs/certChainClaims"
},
"x-nvidia-gpu-driver-rim-signature-verified": {
"type": "boolean"
},
"x-nvidia-gpu-driver-rim-version-match": {
"type": "boolean"
},
"x-nvidia-gpu-driver-rim-measurements-available": {
"type": "boolean"
},
"x-nvidia-gpu-vbios-rim-fetched": {
"type": "boolean"
},
"x-nvidia-gpu-vbios-rim-schema-validated": {
"type": "boolean"
},
"x-nvidia-gpu-vbios-rim-cert-chain": {
"$ref": "#/$defs/certChainClaims"
},
"x-nvidia-gpu-vbios-rim-version-match": {
"type": "boolean"
},
"x-nvidia-gpu-vbios-rim-signature-verified": {
"type": "boolean"
},
"x-nvidia-gpu-vbios-rim-measurements-available": {
"type": "boolean"
},
"x-nvidia-gpu-vbios-index-no-conflict": {
"type": "boolean"
}
},
"required": [
"measres",
"x-nvidia-device-type",
"x-nvidia-gpu-arch-check",
"x-nvidia-gpu-driver-version",
"x-nvidia-gpu-vbios-version",
"x-nvidia-gpu-attestation-report-cert-chain",
"x-nvidia-gpu-attestation-report-cert-chain-fwid-match",
"x-nvidia-gpu-attestation-report-parsed",
"x-nvidia-gpu-attestation-report-nonce-match",
"x-nvidia-gpu-attestation-report-signature-verified",
"x-nvidia-gpu-driver-rim-fetched",
"x-nvidia-gpu-driver-rim-schema-validated",
"x-nvidia-gpu-driver-rim-cert-chain",
"x-nvidia-gpu-driver-rim-signature-verified",
"x-nvidia-gpu-driver-rim-version-match",
"x-nvidia-gpu-driver-rim-measurements-available",
"x-nvidia-gpu-vbios-rim-fetched",
"x-nvidia-gpu-vbios-rim-schema-validated",
"x-nvidia-gpu-vbios-rim-cert-chain",
"x-nvidia-gpu-vbios-rim-version-match",
"x-nvidia-gpu-vbios-rim-signature-verified",
"x-nvidia-gpu-vbios-rim-measurements-available",
"x-nvidia-gpu-vbios-index-no-conflict"
],
"additionalProperties": false
},
"switchClaims": {
"type": "object",
"properties": {
"measres": {
"$ref": "#/$defs/measuresClaim"
},
"secboot": {
"oneOf": [
{ "type": "boolean" },
{ "type": "null" }
],
"description": "Secure boot status (optional)"
},
"dbgstat": {
"oneOf": [
{ "type": "string" },
{ "type": "null" }
],
"description": "Debug status (optional)"
},
"x-nvidia-device-type": {
"type": "string",
"const": "nvswitch",
"description": "Type of NVIDIA device"
},
"x-nvidia-mismatch-measurement-records": {
"oneOf": [
{
"type": "array",
"items": { "$ref": "#/$defs/mismatchedMeasurement" }
},
{ "type": "null" }
],
"description": "Records of mismatched measurements (optional)"
},
"x-nvidia-switch-arch-check": {
"type": "boolean",
"description": "Switch architecture validation result"
},
"x-nvidia-switch-bios-version": {
"type": "string",
"description": "Switch BIOS version"
},
"x-nvidia-switch-attestation-report-cert-chain": {
"$ref": "#/$defs/certChainClaims"
},
"x-nvidia-switch-attestation-report-cert-chain-fwid-match": {
"type": "boolean"
},
"x-nvidia-switch-attestation-report-parsed": {
"type": "boolean"
},
"x-nvidia-switch-attestation-report-nonce-match": {
"type": "boolean"
},
"x-nvidia-switch-attestation-report-signature-verified": {
"type": "boolean"
},
"x-nvidia-switch-bios-rim-fetched": {
"type": "boolean"
},
"x-nvidia-switch-bios-rim-cert-chain": {
"$ref": "#/$defs/certChainClaims"
},
"x-nvidia-switch-bios-rim-signature-verified": {
"type": "boolean"
},
"x-nvidia-switch-bios-rim-version-match": {
"type": "boolean"
},
"x-nvidia-switch-bios-rim-measurements-available": {
"type": "boolean"
}
},
"required": [
"measres",
"x-nvidia-device-type",
"x-nvidia-switch-arch-check",
"x-nvidia-switch-bios-version",
"x-nvidia-switch-attestation-report-cert-chain",
"x-nvidia-switch-attestation-report-cert-chain-fwid-match",
"x-nvidia-switch-attestation-report-parsed",
"x-nvidia-switch-attestation-report-nonce-match",
"x-nvidia-switch-attestation-report-signature-verified",
"x-nvidia-switch-bios-rim-fetched",
"x-nvidia-switch-bios-rim-cert-chain",
"x-nvidia-switch-bios-rim-signature-verified",
"x-nvidia-switch-bios-rim-version-match",
"x-nvidia-switch-bios-rim-measurements-available"
],
"additionalProperties": false
}
},
"items": {
"oneOf": [
{ "$ref": "#/$defs/gpuClaims" },
{ "$ref": "#/$defs/switchClaims" }
]
},
"minItems": 1,
"additionalItems": false
}
Example claims obtained after attesting 8 GPUs#
[
{
"dbgstat": "disabled",
"eat_nonce": "ae1b408bf2f285aa140713eae81fd1b023bcffbc810759edfc6b385eb0631cdf",
"hwmodel": "GH100 A01 GSP BROM",
"measres": "success",
"oemid": "5703",
"secboot": true,
"ueid": "655333107904478077882826344426270545524203067314",
"x-nvidia-device-type": "gpu",
"x-nvidia-gpu-arch-check": true,
"x-nvidia-gpu-attestation-report-cert-chain": {
"x-nvidia-cert-expiration-date": "9999-12-31T23:59:59Z",
"x-nvidia-cert-ocsp-status": "good",
"x-nvidia-cert-revocation-reason": null,
"x-nvidia-cert-status": "valid"
},
"x-nvidia-gpu-attestation-report-cert-chain-fwid-match": true,
"x-nvidia-gpu-attestation-report-nonce-match": true,
"x-nvidia-gpu-attestation-report-parsed": true,
"x-nvidia-gpu-attestation-report-signature-verified": true,
"x-nvidia-gpu-claims-version": "3.0",
"x-nvidia-gpu-driver-rim-cert-chain": {
"x-nvidia-cert-expiration-date": "2027-04-30T23:59:59Z",
"x-nvidia-cert-ocsp-status": "good",
"x-nvidia-cert-revocation-reason": null,
"x-nvidia-cert-status": "valid"
},
"x-nvidia-gpu-driver-rim-fetched": true,
"x-nvidia-gpu-driver-rim-measurements-available": true,
"x-nvidia-gpu-driver-rim-signature-verified": true,
"x-nvidia-gpu-driver-rim-version-match": true,
"x-nvidia-gpu-driver-version": "590.12",
"x-nvidia-gpu-vbios-index-no-conflict": true,
"x-nvidia-gpu-vbios-rim-cert-chain": {
"x-nvidia-cert-expiration-date": "2026-05-31T20:11:53Z",
"x-nvidia-cert-ocsp-status": "good",
"x-nvidia-cert-revocation-reason": null,
"x-nvidia-cert-status": "valid"
},
"x-nvidia-gpu-vbios-rim-fetched": true,
"x-nvidia-gpu-vbios-rim-measurements-available": true,
"x-nvidia-gpu-vbios-rim-signature-verified": true,
"x-nvidia-gpu-vbios-rim-version-match": true,
"x-nvidia-gpu-vbios-version": "96.00.A5.00.01",
"x-nvidia-mismatch-measurement-records": null
},
{
GPU 1 claims ...
},
{
GPU 2 claims ...
},
... etc for all GPUs
]
Detached EAT#
For the schema, refer to here and here
Example EAT obtained after attesting 8 GPUs#
[
[
"JWT",
"eyJraWQiOiJudi1lYXQta2lkLXN0Zy0yMDI1MTAyMzEwMjczMDEzMC0yZTY1N2ViNi01MjZhLTRiNTktODQyZS05NGEzMTQ4NGRjZjQiLCJhbGciOiJFUzM4NCJ9.eyJzdWIiOiJOVklESUEtUExBVEZPUk0tQVRURVNUQVRJT04iLCJ4LW52aWRpYS12ZXIiOiIzLjAiLCJuYmYiOjE3NjEzNDI0NzksImlzcyI6Imh0dHBzOi8vbnJhcy5hdHRlc3RhdGlvbi1zdGcubnZpZGlhLmNvbSIsIngtbnZpZGlhLW92ZXJhbGwtYXR0LXJlc3VsdCI6dHJ1ZSwic3VibW9kcyI6eyJHUFUtMCI6WyJESUdFU1QiLFsiU0hBLTI1NiIsImNkOTE4MTkxNjBjNDI4OTBjZGU2MzNjM2JjMGJkNDdjOWRkM2RlY2NhMDQ5ZjhkOTYwOTY1YzBlZGE1MDZlMzkiXV0sIkdQVS03IjpbIkRJR0VTVCIsWyJTSEEtMjU2IiwiZTE5NzY3YjA3MGI5ZDBhY2IyNTlkM2VjYWFjYWFkODY5MWQzZTJhNThkNzNkODA0NWEwMzhkMzcxZGExMDU0ZiJdXSwiR1BVLTUiOlsiRElHRVNUIixbIlNIQS0yNTYiLCI2ZTk2NDBiYmRlOTBjMmMzN2IxYmYwNzEwMTY4YTk4YmZkMGJhYjA2ZDcwY2FjMDA5YzJhNjUzMDI5ZDljZGFiIl1dLCJHUFUtNiI6WyJESUdFU1QiLFsiU0hBLTI1NiIsImY3NzI0NzllNzM1MjgyYzA3YTUxNWNiYjRhOTFiYTFmZjllMTFlZjAwYjNlZGU4M2Q1ZmRmZDU0M2QxZDNiMTQiXV0sIkdQVS0zIjpbIkRJR0VTVCIsWyJTSEEtMjU2IiwiOTYyNzllYzkwYTMxNjJmMWU3NjU0NjI4NjQ1M2UwZjE5ZWM0MDY5YjJkYWRjMmM3Y2EyM2FkOWIxZjUyZjMyZSJdXSwiR1BVLTQiOlsiRElHRVNUIixbIlNIQS0yNTYiLCJlODgwMzJjMTkwZDA4NjMyMDE0Yjc0N2QxY2NmYTNlMTUwZGNlZjc4MWQwYjg0ZTMxNWZmYmVlMTU0MTQxNGJhIl1dLCJHUFUtMSI6WyJESUdFU1QiLFsiU0hBLTI1NiIsIjg1OWY3ODBiMjAwZTY5NWRlNTU2MjdiMzkzMjA0MWFiMDdiYjBlMzM1ZWVhNzVhMTBkMjYzZGQzMDJhYzQ1YzYiXV0sIkdQVS0yIjpbIkRJR0VTVCIsWyJTSEEtMjU2IiwiMGY0Yzc1YWQ2MTMwMTI0Mzk0MTY5YzE5ZTJiMDljZDNkNjhkMmI3Y2Y3N2ZiMTFlMjcwNDIzZDI0OWMzMzdhMCJdXX0sImVhdF9ub25jZSI6ImFlMWI0MDhiZjJmMjg1YWExNDA3MTNlYWU4MWZkMWIwMjNiY2ZmYmM4MTA3NTllZGZjNmIzODVlYjA2MzFjZGYiLCJleHAiOjE3NjEzNDYwNzksImlhdCI6MTc2MTM0MjQ3OSwianRpIjoiODA0MjhlNDAtNDA1Zi00MzA2LWI5NDctMGUyMTI5MGU2YzJjIn0.zitqEPZB2zrW7aZ5ptLrPvlFpew30bHmqVthhdsYeP7XRRpSekQZef-F0zqZBt7fpoYuutv5L15AujSUMGDgfJVH0W07H50q8x1ldiOmBw5yjtEfPaXUrMd59VtXDzU7"
],
{
"GPU-0": "eyJraWQiOiJudi1lYXQta2lkLXN0Zy0yMDI1MTAyMzEwMjczMDEzMC0yZTY1N2ViNi01MjZhLTRiNTktODQyZS05NGEzMTQ4NGRjZjQiLCJhbGciOiJFUzM4NCJ9.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.nA0YPp7KS7GMZZXFKxBcpMWv6yjFaw7RWy6SmTIwNDspchvE-UYV7RzdQuLlJY2Dqefth9gqEqaw59QVfEuyJ9W1dH5eAlkwLmQJtOeQc2Ur94Y2x8KlJZoFF7jURz98",
"GPU-1": "JWT Token....",
"GPU-2": "JWT Token....",
... all GPUs JWT tokens...
}
]