/microsoft-azure-attestation

Microsoft Azure Attestation is a solution for attesting Trusted Execution Environments (TEEs)

Primary LanguageCMIT LicenseMIT

page_type languages products description
sample
c
csharp
azure
Learn how to perform Intel® SGX Attestation using Microsoft Azure Attestation

Sample code for Intel® SGX Attestation using Microsoft Azure Attestation

Intel® SGX Attestation sample code demonstrates how to generate a quote from an SGX enclave using Open Enclave SDK / Intel SDK and then get it validated by Microsoft Azure Attestation. The "enclave held data" for the quote is populated with public key component that's held within the enclave.

The components used in the sample code are outlined in the following diagram: SGX Attestation Overview Diagram

The flow is:

  1. Build an SGX enclave
  2. Launch an SGX enclave and get SGX quote
  3. Persist SGX quote and Enclave Held Data (EHD) to JSON file
  4. Call Azure Attestation for validation
  5. Output validation results

See code sample to perform SGX attestation using Open Enclave SDK

See code sample to perform SGX attestation using Intel SDK

Customer code samples leveraging Azure Attestation