What can I help you with?
NVIDIA NVOS User Manual for NVLink Switches v25.02.2141

SPDM Commands

nv show system security spdm

Show list of component integrity ERoT in the BMC, with their measurements if present and certificate-chains.

Syntax Description

N/A

Default

N/A

History

25.02.1884

Example

Copy
Copied!
            

admin@nvos:~$ nv show system security spdm Component        Id         HashingAlgorithm ---------------  ---------  ---------------- ERoT_BMC_0       CertChain  None           ERoT_CPU_0       CertChain  None           ERoT_FPGA_0      CertChain  None           ERoT_NVSwitch_0  CertChain  None           ERoT_NVSwitch_1  CertChain  None          

Copy
Copied!
            

admin@nvos:~$ nv show system security spdm ERoT_BMC_0                      operational ------------------  ----------- measurements                  HashingAlgorithm  None       certificates                    Id                CertChain 

REST API

GET https://<ip>/nvue_v1/system/security/spdm

Related Commands

nv action generate system security spdm

nv show system security spdm measurements

nv show system security spdm certificates

Notes

The output differs between JSON and regular "nv show" formats. The regular display will only show a list of ERoT and only if the relevant fields are present. In contrast, the JSON output is much longer, comprising five ERoT responses.

In th output, when the name of the component is listed, the possible outcomes are as follows: (enum:ERoT_BMC_0, ERoT_CPU_0, ERoT_FPGA_0, ERoT_NVSwitch_0, ERoT_NVSwitch_1)

nv show system security spdm certificates

Shows certificate-chain of component integrity ERoT in the BMC.

Syntax Description

N/A

Default

N/A

History

25.02.1884

Example

Copy
Copied!
            

admin@nvos:~$ nv show system security spdm ERoT_BMC_0 certificates       operational --  ----------- Id  CertChain  nv show sys sec spdm ERoT_CPU_0 certificates -ojson {   "CertificateString": "-----BEGIN CERTIFICATE-----\n…AX\n-----END CERTIFICATE-----\n",   "CertificateType": "PEMchain",   "CertificateUsageTypes": [     "Device"   ],   "Id": "CertChain",   "Name": "MGX_ERoT_CPU_0 Certificate Chain",   "SPDM": {     "SlotId": 0   } }

REST API

GET https://<ip>/nvue_v1/system/security/spdm/ERoT_BMC_0/ certificates

Related Commands

nv action generate system security spdm

nv show system security spdm measurements

nv show system security spdm

Notes

The output differs between JSON and regular "nv show" formats. The regular display will only show a list of ERoT and only if the relevant fields are present.

nv show system security spdm measurements

Shows certificate-chain of component integrity ERoT in the BMC.

Syntax Description

N/A

Default

N/A

History

25.02.1884

Example

Copy
Copied!
            

admin@nvos:~$ nv show system security spdm ERoT_BMC_0 certificates   operational ------------------  ----------- measurements                  HashingAlgorithm  None           nv show sys sec spdm ERoT_CPU_0 measurements -ojson {      "HashingAlgorithm": "None",      "SignedMeasurements": "",      "SigningAlgorithm": "None",      "Version": "unknown"     }

REST API

GET https://<ip>/nvue_v1/system/security/spdm/ERoT_BMC_0/ measurements

Related Commands

nv action generate system security spdm

nv show system security spdm certificates

nv show system security spdm

Notes

Result differs on Json and nv show format – regular show will show only list of ERoT and if fields are present

nv action generate system security spdm

Generate measurements on BMC.

Syntax Description

nonce

64 char hex string

Default

N/A

History

25.02.1884

Example

Copy
Copied!
            

admin@nvos:~$ nv action generate system security spdm ERoT_BMC_0 Action executing ... Action succeeded

REST API

POST https://<ip>/nvue_v1/system/security/spdm/{component-id}

Related Commands

nv show system security spdm

nv show system security spdm measurements

nv show system security spdm certificates

Notes

© Copyright 2025, NVIDIA. Last updated on Apr 23, 2025.