Integrating with Intel® Tiber™ Trust Services and Intel TDX for Confidential Computing

Confidential Computing is a cloud computing technology that can isolate and protect data on Confidential Virtual Machines (CVMs), or Trusted Domains (TDs), while it is being processed by the application, to protect it from a broad range of software attacks. Confidential computing ensures that all data operations are executed within a Trusted Execution Environment.

Confidential Computing provisioning requires Intel® Tiber™ Trust Services (ITTS), to attest the CVMs, or TDs, and create a Trusted Execution Environment around them. ITTS is a verifier in a remote attestation application architecture. In Remote Attestation procedures, one peer (the "Attester"), produces cryptographic information about itself ("Evidence") to enable a remote peer (the "Relying Party") to decide whether or not to consider that Attester a trustworthy peer. In this case, CipherTrust Manager is the Relying Party.

CTE-U and CipherTrust Manager manage the attestation process to provision confidential computing on VMs running on CTE-U agents to provide End-To-End Data Protection. The role for CTE-U in this confidential computing model is to gather the evidence and provide that to CipherTrust Manager to have it attested for by ITTS. If attestation fails, CTE-U does not prevent access to the encrypted data that it guards.

Requirements & Specifications

System	Description
Attestation Authority	Intel® Tiber™ Trust Services (ITTS)
Agent Requirements Minimum versions listed. Subsequent versions also valid.	Cloud Service Provider: Azure version 5.19 Operating System: Ubuntu 22.04 Kernel: 6.5.0-1025-azure
CipherTrust Manager Minimum Version	2.18
CTE-U Minimum Version	10.4.0

Prerequisites

1. Install CipherTrust Manager v2.18, or a subsequent version, on a virtual or physical system.

2. Obtain a valid account for Microsoft Azure.

3. Obtain an Intel® Tiber™ Trust Services account.

4. Install and configure Microsoft Authenticator on your mobile phone.

Provision a TDX machine from Microsoft Azure

TDX is the remote attestation service.

1. Login to the Azure Portal.

2. Open Microsoft Authenticator to obtain an authorization code.

3. Enter that Microsoft Authenticator code in the dialog on the Azure Portal page.

4. From the home page of the Azure portal, click Create Resource.

5. Click Virtual Machine > Create and follow the on-screen instructions to create a VM.

   Field Name	Value
   Security Type	Confidential virtual machine
   OS Image	Ubuntu Server 22.04 LTS (Confidential VM) -x64 Gen 2
   VM architecture	x64
   Size	Standard DC4eds_v5 or larger

   Note

   Secure boot is enabled by default. You can disable it once confidential VM security type is selected. A link appears for configuring the security features. Toggle the option for Enable secure boot to disable it.

6. Click Review & Create.

   

Validate TDX machine

1. List the contents for /dev/tpm, type:

   ls -l /dev/tpm*
   

   Result

   crw-rw---- 1 tss root  10,   224 Aug 14 22:25 /dev/tpm0
   crw-rw---- 1 tss tss  253, 65536 Aug 14 22:25 /dev/tpmrm0
   

2. Verify that Intel TDX is activated, type:

   grep TDX
   

   Result

   [    0.902814] Memory Encryption Features active: Intel TDX
   

3. Verify that the TPM (Trusted Platform Module) is valid, type:

   grep TPM
   

   Result

   [    0.000000] efi: ACPI=0xbfffa000 ACPI 2.0=0xbfffa014 SMBIOS=0xbff85000 SMBIOS 3.0=0xbff83000 TPMFinalLog=0xbeb39000 MEMATTR=0xbf414018 MOKvar=0xbf402000 INITRD=0xbea62c18                RNG=0xbffd2018                                  TPMEventLog=0xb6fb3018
   [    0.070902] ACPI: TPM2 0x00000000BFFD3000 000034 (v03 VRTUAL VTPM     00000001 MSFT 00000001)
   [    0.094058] ACPI: Reserving TPM2 table memory at [mem 0xbffd3000-0xbffd3033]
   

Reference Information

• Create a confidential VM with the Azure CLI

• Deploy confidential VM with ARM template

• Create confidential VM in the Azure portal

Install the Trusted Platform Module tools on your Agent VM

1. Download the Trusted Platform Module (TPM) tools, type:

   git clone https://github.com/tpm2-software/tpm2-tools
   

2. Install the Trusted Platform Module (TPM) tools on the CTE-U agent, type:

   apt install tpm2-tools
   

Creating Keys and Policies in the Intel Portal

1. Open Microsoft Authenticator on your mobile phone. The login requests an authentication code from Microsoft Authenticator to access the site.

2. Login to the Intel Portal.

3. Create an Attestation API key. You can associate it with either a simple policy, or one with an MRTD (Measurement of Trust Domain) value.

   1. In the navigation bar on the left, click Manage Policies.

   2. Click Add a Policy. Follow the on-screen instructions for creating a policy.

      Field Name	Value
      Attestation Type	TDX Attestation
      Policy Type	Appraisal policy with an MRTD value.

      Simple Policy

      default matches_sgx_policy = false
      matches_sgx_policy = true
      {
      input.tdx_is_debuggable == false
      input.attester_tcb_status = "UpToDate"
      }
      

   3. To find the TDX MRTD value, on the CTE-U agent, type:

      sudo tpm2_nvread --offset=560 --size=48 -C o 0x01400001 | xxd -p | tr -d '\n' | awk '{print}'
      

   4. To find the TDX MRSEAM value, on the CTE-U agent, type:

      sudo tpm2 nvread --offset=312 --size=48 -C o 0x01400001 | xxd -p | tr -d
      

   5. Add the policy that you created in the previous step to your API key.

4. Create an Admin API Key.

   1. In the navigation bar on the left, click Admin API Keys.

   2. Select the View icon () for the API key that you want to copy.

   3. Select the Copy icon (). The API key is copied to your system memory.

   4. Alternatively, to create a new API key, click Delete/Regenerate API Key.

      

   5. Use the API key with the Trust Services CTL CLI utility to manage admins and users.

Reference Information

To learn how to create an Intel Trust Services policy, consult the following Intel documentation:

• Appraisal Policies

• Author a custom policy

• Policy builder tool

CipherTrust Manager Requirements

Create an Attestation Authority Connection

Provisioning Confidential Computing on CTE-U clients requires one admin connection (connection with administrator privileges) and one non-admin connection (connection without administrator privileges). The admin connection is necessary to retrieve the policies from the Attestation Authority. CipherTrust Manager uses the connection details to communicate with ITTS for agent attestation when a request is received from the agent.

To create the Attestation Authority connections:

1. Log on to CipherTrust Manager.

2. In the left nav-bar, click Access Management > Connections.

3. Select + Add Connection.

4. In the Select Connection Type, click More.

5. From the Select Connection dropdown, select Attestation Authority and click Next.

6. In the General Info section, enter the Name and Description for the connection and click Next.

7. In Configure Connection, create an Admin User Connection by selecting from the following options. Choose European or US for your URLs based on which URL is valid for your account:

   Field Name	Value	Description
   URL for API method	https://api.trustauthority.intel.com	URL for connecting to the Attestation Authority.
   Base European URL	https://portal.eu.trustauthority.intel.com	Base URL for the Attestation Authority.
   Base U.S. URL	https://portal.trustauthority.intel.com	Base URL for the Attestation Authority.
   API Key		Provide either the Admin API key or the Attestation API key created in ITTS to establish the connection with the Attestation Authority.
   Base API European URL	https://api.eu.trustauthority.intel.com	Base URL for API connection.
   Base API U.S. URL	https://api.trustauthority.intel.com	Base URL for API connection.

8. Select Admin User to create a connection with administrator privileges. Click Next.

9. In Add Products section, select the CTE-U checkbox.

10. Click Add Connection.

11. Repeat these steps to create the Attestation connection. Do not select Admin User in step 8.

Create a Global Client Profile

Create a Client Profile to associate with the Attestation Authority connection.

1. In the CipherTrust Manager dashboard, click Access Management > Client Profiles > Add Client Profile.

2. Enter Profile Name and Description.

3. Select CA Type: Local or External.

4. Select the respective Local or External CA in Select <CA Type> CA.

5. Enter the Certificate Duration (in days) for which the CA certificate remains active.

6. Expand the CONFIDENTIAL COMPUTING section and add the following details:

   Field Name	Value	Description
   Attestation Authority Identifier	Intel Trust Authority (ITTS)
   Attestation Type	TDX Attestation
   Attestation Connection	Select a non-admin connection
   Admin Connection	Select an admin connection	Note: Admin and non-admin type connections should belong to the same Attestion Authority.
   Policy Type	Appraisal policy	These policies are fetched from the Attestation Authority server. You can select appraisal policies.
   Policy Names	<policy_names>	Select one or more policies from the drop-down menu.
   Cloud Provider	Azure

7. Click Add/Update Client Profile.

Create a Registration Token

Create a registration token on the CipherTrust Manager. You must have administrator privileges to create registration tokens.

1. Log on to the CipherTrust Manager GUI as administrator.

2. In the left pane, click Access Management > Registration Tokens.

3. On the right, click Add Registration Token. The Create New Registration Token wizard displays.

4. Click Begin to start token creation. The Configure Token screen displays.

5. (Optional) Specify a Name Prefix for the client name. This prefix is used to construct names for clients whose names are not specified during registration with the CipherTrust Manager using this token.

   • If the name prefix is specified as ks_client, client names will be constructed as ks_client#; for example, ks_client1, ks_client2, ks_client3, and so on. However, if a client's name is specified during registration, this name prefix is not used for that client.

   • If the name prefix is not specified, the CipherTrust Manager will construct a random name for clients.

6. Set the Token lifetime. You must include a time unit with it such as:

   Token Lifetime Span	Value
   10 m	10 minutes
   10 h	10 hours
   10 d	10 days
   unlimited	Never expires

7. Specify Client Capacity. This is the maximum number of clients that can be registered using this registration token. The default capacity is 100 clients.

8. Select Add Profile and add the client profile that you just created.

9. Click Create Token. The Create Token screen displays the generated registration token in ASCII and Base64 encoding. CipherTrust Manager accepts the registration token in ASCII format only.

10. Click Copy next to the token to save the copied token. Use this token when registering and migrating clients.

Install and Register CTE-U with a Confidential Computing Azure VM

Install CTE-U

1. Log on to the host where you will install the CTE UserSpace Agent as root. You cannot install the CTE-U Agent without root access.

2. Copy or mount the installation file to the host system.

3. Install CTE UserSpace, type

   apt install <cteu-version>.<build>.deb`
   

   Example

   apt install ./cte-fuse_10.1.0.52.deb`
   

   Caution

   CTE-U does not support customer paths for Ubuntu installation. You must use the default path.

Register CTE-U

1. The install script installs the CTE-U Agent software, and any missing dependencies, in either /opt/vormetric or your custom installation directory (excluding Ubuntu), and then prompts you to register the CTE UserSpace Agent with a key manager by running /opt/vormetric/DataSecurityExpert/agent/vmd/bin/register_host.

   Welcome to the CipherTrust Transparent Encryption File System Agent Registration Program.
   
   Agent Type: CipherTrust Transparent Encryption File System Agent
   
   Agent Version: 10.4.0.54
   
   In order to register the CipherTrust Transparent Encryption File System Agent with a Key Manager
   
   1. you must know the host name of the machine running the DSM (the host name is displayed on the Dashboard window of the Management Console), and
   
   2. unless you intend to use the 'shared secret' registration method, the agent's host machine must be pre-configured on the DSM as a host with the 'Reg. Allowed' checkbox enabled for this agent type on the Hosts window of the Management Console.
   
   In order to register with a Key Manager you need a valid registration token from the CM.
   
   Do you want to continue with agent registration? (Y/N) [Y]:
   

2. Enter Y to continue with the registration process. The install script prompts you to enter the host name or IP address of the CipherTrust Manager with which you want to register CTE-U.

   For example:
   
   Do you want to continue with agent registration? (Y/N) [Y]: Y
   
   Please enter the primary key manager host name: 10.3.200.141:8445
   
   You entered the host name 10.3.200.141<br>
   Is this host name correct? (Y/N) [Y]: Y
   

3. Enter the client host name when prompted.

   Please enter the host name of this machine, or select from the following
   list.
   
   [1] sys31186.qa.com
   [2] 10.3.31.186
   
   Enter a number, or type a different host name or IP address in manually:<br>
   What is the name of this machine? [1]: 2
   You selected "10.3.31.186".
   

4. Enter the CipherTrust Manager registration token, profile name, host group and host description. If you omit the profile name, CipherTrust Manager associates the default client profile with this client.

   Please enter the registration token: 12345
   Please enter the profile name for this host: My-Profile
   Please enter the host group name for this host, if any:
   Please enter a description for this host: West Coast Datacenter server 5
   
   Token : 12345
   Profile name : My-Profile
   Host Group : (none)
   Host description : West Coast Datacenter server 5
   Are the above values correct? (Y/N) [Y]: Y
   

5. CTE-U finishes the installation and registration process.

   Generating key pair for the kernel component...done.<br>
   Extracting SECFS key<br>
   Generating EC certificate signing request for the vmd...done.<br>
   Signing certificate...done.<br>
   Enrolling agent with service on 10.3.200.141...done.<br>
   Successfully registered the CipherTrust Transparent Encryption File System Agent with the<br>
   CipherTrust Manager on 10.3.200.141.
   
   Installation success.
   

Reference Information

1. Installation Prerequisites

2. Installation and Registration

3. Verifying Package Signatures

Validate Confidential Computing on the CTE-U Agent for Attestation

1. Verify that your CTE-U agent is capable of confidential computing, type:

   sudo /opt/vormetric/DataSecurityExpert/agent/vmd/bin/vmutil -a vmd cc_check
   

   Result if validation succeeds

   This system is capable of confidential computing.
   

   Result if validation fails

   This system is not capable of confidential computing
   

   In the UI, CipherTrust Manager displays the term warning in the status column and displays a banner message indicating that the Agent failed attestation.

   

2. If using a policy with an MRTD value, validate that the MRTD value in the policy and on the Agent are the same, type:

   sudo tpm2_nvread --offset=560 --size=48 -C o 0x01400001 | xxd -p | tr -d '\n' | awk '{print}'
   

   It should be the same value as the MRTD value on this file:

   cat /opt/vormetric/DataSecurityExpert/agent/vmd/etc/attestation.txt
   

Confidential Computing Policies

There are no special CTE-U policies for Confidential Computing. Create standard and LDT policies as usual.

Confidential Computing GuardPoints

There are no special GuardPoints for Confidential Computing. Create GuardPoints as usual.