Google Cloud Confidential Computing V1 Client - Class TpmAttestation (0.7.0)

Reference documentation and code samples for the Google Cloud Confidential Computing V1 Client class TpmAttestation.

TPM2 data containing everything necessary to validate any platform state measured into the TPM.

Generated from protobuf message google.cloud.confidentialcomputing.v1.TpmAttestation

Namespace

Google \ Cloud \ ConfidentialComputing \ V1

Methods

__construct

Constructor.

Parameters
NameDescription
data array

Optional. Data for populating the Message object.

↳ quotes array<Google\Cloud\ConfidentialComputing\V1\TpmAttestation\Quote>

TPM2 PCR Quotes generated by calling TPM2_Quote on each PCR bank.

↳ tcg_event_log string

The binary TCG Event Log containing events measured into the TPM by the platform firmware and operating system. Formatted as described in the "TCG PC Client Platform Firmware Profile Specification".

↳ canonical_event_log string

An Event Log containing additional events measured into the TPM that are not already present in the tcg_event_log. Formatted as described in the "Canonical Event Log Format" TCG Specification.

↳ ak_cert string

DER-encoded X.509 certificate of the Attestation Key (otherwise known as an AK or a TPM restricted signing key) used to generate the quotes.

↳ cert_chain array

List of DER-encoded X.509 certificates which, together with the ak_cert, chain back to a trusted Root Certificate.

getQuotes

TPM2 PCR Quotes generated by calling TPM2_Quote on each PCR bank.

Returns
TypeDescription
Google\Protobuf\Internal\RepeatedField

setQuotes

TPM2 PCR Quotes generated by calling TPM2_Quote on each PCR bank.

Parameter
NameDescription
var array<Google\Cloud\ConfidentialComputing\V1\TpmAttestation\Quote>
Returns
TypeDescription
$this

getTcgEventLog

The binary TCG Event Log containing events measured into the TPM by the platform firmware and operating system. Formatted as described in the "TCG PC Client Platform Firmware Profile Specification".

Returns
TypeDescription
string

setTcgEventLog

The binary TCG Event Log containing events measured into the TPM by the platform firmware and operating system. Formatted as described in the "TCG PC Client Platform Firmware Profile Specification".

Parameter
NameDescription
var string
Returns
TypeDescription
$this

getCanonicalEventLog

An Event Log containing additional events measured into the TPM that are not already present in the tcg_event_log. Formatted as described in the "Canonical Event Log Format" TCG Specification.

Returns
TypeDescription
string

setCanonicalEventLog

An Event Log containing additional events measured into the TPM that are not already present in the tcg_event_log. Formatted as described in the "Canonical Event Log Format" TCG Specification.

Parameter
NameDescription
var string
Returns
TypeDescription
$this

getAkCert

DER-encoded X.509 certificate of the Attestation Key (otherwise known as an AK or a TPM restricted signing key) used to generate the quotes.

Returns
TypeDescription
string

setAkCert

DER-encoded X.509 certificate of the Attestation Key (otherwise known as an AK or a TPM restricted signing key) used to generate the quotes.

Parameter
NameDescription
var string
Returns
TypeDescription
$this

getCertChain

List of DER-encoded X.509 certificates which, together with the ak_cert, chain back to a trusted Root Certificate.

Returns
TypeDescription
Google\Protobuf\Internal\RepeatedField

setCertChain

List of DER-encoded X.509 certificates which, together with the ak_cert, chain back to a trusted Root Certificate.

Parameter
NameDescription
var string[]
Returns
TypeDescription
$this