Intel Agilex® 7 Device Security User Guide

ID 683823
Date 7/07/2023
Document Table of Contents

5.3. Platform Attestation

You can generate a reference integrity manifest (.rim) file using the programming file generator tool:
quartus_pfg -c signed_encrypted_top.rbf top_rim.rim
Follow these steps to ensure the platform attestation in your design:
  1. Use the Intel® Quartus® Prime Pro Programmer to configure your device with the design you created a reference integrity manifest for.
  2. Use a platform attestation verifier to enroll the device by issuing commands to the SDM via the SDM mailbox to create the device ID certificate and firmware certificate on reload.
  3. Use the Intel® Quartus® Prime Pro Programmer to reconfigure your device with the design.
  4. Use the platform attestation verifier to issue commands to the SDM to get the attestation device ID, firmware, and alias certificates.
  5. Use the attestation verifier to issue the SDM mailbox command to get the attestation evidence and the verifier checks the returned evidence.

You may implement your own verifier service using the SDM mailbox commands, or use the Intel platform attestation verifier service. For more information about Intel platform attestation verifier service software, availability, and documentation, contact Intel Support.

Did you find the information on this page useful?

Characters remaining:

Feedback Message