Collecting and Verifying Evidence#

This page provides detailed instructions on how to collect and verify attestation evidence from NVIDIA GPUs and NVSwitch devices. This evidence is used by both local and remote verifiers to attest the integrity of your hardware.

Overview#

Evidence collection is the first step in the attestation process. The evidence contains:

  • Attestation Report: SPDM-formatted measurements from the device

  • Certificate Chain: Device certificates for verification

  • GPU/Switch Information: Architecture, versions, and configuration details

Note: The evidence collection process is identical for single-GPU and multi-GPU systems. The SDK automatically detects and collects evidence from all available GPUs.

GPU Evidence Collection#

Using Python SDK#

The NVIDIA Attestation SDK provides a simple interface to collect evidence from all GPUs in the system:

from nv_attestation_sdk import attestation

# Create an attestation client
client = attestation.Attestation()

# Add verifier for GPU devices
client.add_verifier(attestation.Devices.GPU, attestation.Environment.LOCAL, "", "")

# Get GPU Evidence - this automatically collects evidence from ALL GPUs
evidence_list = client.get_evidence()

Using NVML Directly#

For users who need lower-level access and more granular control over evidence collection, you can use the NVIDIA Management Library (NVML) API directly. This approach provides direct access to GPU attestation functions and enables custom integration into existing monitoring or management systems.

Refer to the NVML API Reference Guide for complete API documentation.

Hopper Multi-GPU (PPCIE)#

For hopper multi-GPU systems with multiple GPUs and NVSwitch devices, use the PPCIE verifier.

# Run PPCIE verifier to collect evidence from all devices
sudo python3 -m ppcie.verifier.verification \
  --gpu-attestation-mode=LOCAL \
  --switch-attestation-mode=LOCAL \
  --log=INFO

The PPCIE verifier automatically:

  • Enumerates all GPUs and switches

  • Collects evidence from each device

  • Validates the system topology

  • Performs attestation on all devices

Additional Resources#

On this page