Skip to main content

Configuration

Golden values database and the exclude list database​

A python script is provided to create the database of trusted values. In case of known files to be excluded in the verification, add the file or path name in the file ./script/exclude.txt one per line. Then run this Python script on the Attester Agent. It will take some time.

sudo python3 ./scripts/goldenvalue_db_generator.py sha256 <path/file_to_measure>

e.g. measure all system's files

sudo python3 ./scripts/goldenvalue_db_generator.py sha256 /

If you subsequently need to add other files/paths to the exclude list, you can use the following Python script

sudo python3 ./scripts/add_excludelist.py <path/file_to_exclude>

Config file​

Follow the instruction in the config-file section to populate the config files

TODO minimal configuration

Verifier configuration​

Copy the goldenvalue database from the agent to the path defined by db the config file section [Verifier]

scp user@agent_ipd_addr:/home/user/embrave/goldenvalues.db <path_config_db>

e.g. for default value

scp user@agent_ipd_addr:/home/user/embrave/goldenvalues.db /var/embrave/verifier/db.sqlite