-
Notifications
You must be signed in to change notification settings - Fork 105
Description
Recently Intel did following changes to TcbEvaluationDataNumber API:
Intel® SGX and Intel® TDX Provisioning Certification Service – Adding TCB Evaluation Data Number Historical Data
Dear Intel® SGX and Intel® TDX Customers,
The “Retrieve TCB Evaluation Data Numbers” endpoint (/{sgx/tdx}/certification/v4/tcbevaluationdatanumbers) response has been supplemented with additional historical data back to late 2022 (tcbEvaluationDataNumber = 13), which is the TCB Recovery immediately prior to the introduction of version 4 APIs of the Intel® SGX and Intel® TDX Provisioning Certification Service.
This has been done to facilitate using date-based appraisal policies, as Intel SGX and Intel TDX ecosystem adoption of attestation appraisal capabilities increases. Reference the Attestation Appraisal section of the [Trusted Computing Base Recovery guidance page](https://www.intel.com/content/www/us/en/developer/topic-technology/software-security-guidance/trusted-computing-base-recovery-attestation.html) or the Guidance for Infrastructure Providers section of the [Trusted Computing Base Recovery technical paper](https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/best-practices/trusted-computing-base-recovery.html) for more details.
Thank You,
Intel SGX & TDX Services Team
So this API now will response outdated TcbEvaluationDataNumber.
Since PCCS is cache service and not able to cache the Gone response from Intel PCS, We need to change the test behavior to call QE ID API with update=standard to get the smallest TcbEvaluationDataNumber that's still available.
Then filter out those outdated TcbEvaluationDataNumbers.