TrustedInfrastructureTrustAuthorityClustersAttestationTpm2EndorsementKeysCreateSpec

The EndorsementKeys.CreateSpec structure contains information that describes a TPM endorsement key. Only one of EndorsementKeys.CreateSpec.public-key or EndorsementKeys.CreateSpec.certificate must be specified.


Properties

Required Property Name Type Description
optional certificate string

TPM endorsement key certificate in PEM format. When a endorsement key certificate is provided, it will be verified against the CA certificate list. Endorsement key certificates that are not signed by one of the CA certificates will be rejected.

Using this format allows for failures to be caught during configuration rather than later during attestation.

If unset EndorsementKeys.CreateSpec.public-key must be set.

required name string

A unique name for the TPM endorsement key. The unique name should be something that an administrator can use to easily identify the remote system. For example, the hostname, or hardware UUID.

When clients pass a value of this structure as a parameter, the field must be an identifier for the resource type: com.vmware.vcenter.trusted_infrastructure.trust_authority_clusters.attestation.tpm2.EndorsementKey. When operations return a value of this structure as a result, the field will be an identifier for the resource type: com.vmware.vcenter.trusted_infrastructure.trust_authority_clusters.attestation.tpm2.EndorsementKey.

optional public_key string

TPM public endorsement key in PEM format. If unset EndorsementKeys.CreateSpec.certificate must be set.

JSON Example

{
    "name": "string"
}
Feedback

Was this page helpful?