Skip to main content

CLI Proxy

Dynamic Server PCR Configurations​

Your OBLV CLI can fetch the PCR codes from a PCR server, allowing for a centralised endpoint to dynamically validate the PCRs of the version of OBLV Deploy being used.

In order to do that, two things need to be updated in the config file:

  • the usePCRServer flag
  • the pcrServer value

This can be done using the sub-command oblv configure as follows:

oblv configure --config config.yaml \
  --use-pcr-server true \
  --pcr-server https://pcrs.example.com

This will update the config file with:

oblvVersion: 0.1.0
usePCRServer: true
enclave:
  pcrs:
  - PCR0
  - PCR1
  - PCR2
pcrCheck: true
pcrServer: https://pcrs.oblv-deploy.com
...

When this config file is used, the PCR codes would be fetched from the URL https://pcrs.example.com and used for the attestation.