Obtaining the attestation policy fields
You must obtain the IBM Secure Execution (SE) header and other attestation policy fields.
- Follow the step "Obtain the attestation policy fields" in Configuring the IBM Secure Execution Certificates and Keys to
obtain the following files:
ibmse-policy.regohdr.binNote: You will be shown a link to continue to the third-party screen. Click the link to proceed.
- Create a directory
hdrfor thehdr.binfile by running the following command:$ mkdir -p kbs/data/hdr - Copy the
hdr.binfile to thehdrdirectory by running the following command:$ cp hdr.bin kbs/data/hdr/hdr.bin - Create a directory
attestation-servicefor the attestation service repository by running the following command:$ mkdir -p kbs/data/attestation-service - Create a directory
opafor theibmse-policy.regoby running the following command:$ mkdir -p kbs/data/attestation-service/opa - Copy the
ibmse-policy.regoto theopadirectory by running the following command:$ cp ibmse-policy.rego kbs/data/attestation-service/opa/default.rego