Uploaded image for project: 'Openshift sandboxed containers'
  1. Openshift sandboxed containers
  2. KATA-3989

Rework 7.13.3. Configuring PCCS for TDX

XMLWordPrintable

    • Icon: Story Story
    • Resolution: Done
    • Icon: High High
    • OSC 1.10.0
    • None
    • Documentation
    • None
    • False
    • Hide

      None

      Show
      None
    • True
    • 0

      Please review the values, policies, and secrets for Trustee: 7.13. Configuring Trustee values, policies, and secrets for accuracy. 

      Change the section heading to align with the instructions:
      7.13.3. Configuring PCCS for TDX Create TDX configmap

      If you use Intel Trust Domain Extensions (TDX), you must configure Trustee to use the Provisioning Certificate Caching Service (PCCS).

      The PCCS retrieves the Provisioning Certification Key (PCK) certificates and caches them in a local database.

       

      Updated example tdx-config.yaml:

       

      Procedure

      Create a tdx-config.yaml manifest file according to the following example:

      apiVersion: v1
      
      data:
      
        sgx_default_qcnl.conf: |
      
          {
      
            "collateral_service": "https://api.trustedservices.intel.com/sgx/certification/v4/"
      
          }
      
      kind: ConfigMap
      
      metadata:
      
        name: tdx-config
      
        namespace: trustee-operator-system
      
      

       

      Consolidated the required changes in this doc - https://docs.google.com/document/d/1j1LvxHkJIisNSX57JkWoTwSGtKNLvKPbDiRkitswkXA/edit?tab=t.0

              rhn-support-jowilkin John Wilkins
              bpradipt Pradipta Banerjee
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: