Skip to content

Latest commit

 

History

History
42 lines (27 loc) · 1.67 KB

File metadata and controls

42 lines (27 loc) · 1.67 KB

Azure Confidential Virtual Machine with ADM SEV-SNP

This demo is based on Microsoft's sample app for Confidential VM Platform Guest attestation. I am (still) using my own fork of the project, as an earlier version use Microsoft's sample used to point to a "test" endpoint of the Microsoft Azure Attestation Service. My fork will use the sharedeus production endpoint.

Deploy to Azure

Deploy to Azure

Demo steps to execute

Connect to the confidential VM and copy the confidential-computing-cvm-guest-attestation directory from / to the current user's home directory.

cp -r /confidential-computing-cvm-guest-attestation ~
# Head into the directory
cd ~/confidential-computing-cvm-guest-attestation/cvm-guest-attestation-linux-app

# Show the source code (or connect via Vs Code)
vi main.cpp

# Build the binary
cmake .
make

# Run the guest attestation process
sudo ./AttestationClient

# A jwt-token is shown, which can be decoded with
# base64 -d

More information regarding the payload can be found over at the "What is guest attestation for confidential VMs?" page.

Cleanup

rm -rf ~/confidential-computing-cvm-guest-attestation