This demo is based on Microsoft's sample app for Confidential VM Platform Guest attestation. I am (still) using my own fork of the project, as an earlier version use Microsoft's sample used to point to a "test" endpoint of the Microsoft Azure Attestation Service. My fork will use the sharedeus production endpoint.
Connect to the confidential VM and copy the confidential-computing-cvm-guest-attestation
directory from /
to the current user's home directory.
cp -r /confidential-computing-cvm-guest-attestation ~
# Head into the directory
cd ~/confidential-computing-cvm-guest-attestation/cvm-guest-attestation-linux-app
# Show the source code (or connect via Vs Code)
vi main.cpp
# Build the binary
cmake .
make
# Run the guest attestation process
sudo ./AttestationClient
# A jwt-token is shown, which can be decoded with
# base64 -d
More information regarding the payload can be found over at the "What is guest attestation for confidential VMs?" page.
rm -rf ~/confidential-computing-cvm-guest-attestation