Skip to content

[Bug]: Missing VBIOS RIM prevents PPCIe attestation on an 8-GPU HGX H800 system #151

Description

@pyz-creeper

Note: The Python Attestation SDK, Local GPU Verifier, and PPCIE Verifier 1.x are deprecated.
Please use the C++ SDK and CLI instead.
If your issue relates to deprecated components, we may not be able to address it.

Component
PPCIE Verifier 1.x (deprecated) / NVIDIA production RIM service

Although the original verifier error was produced by PPCIE Verifier 1.x, the
missing RIM is independently reproducible with an authenticated HTTP GET
request to the production RIM service.

Describe the bug
I am deploying NVIDIA Protected PCIe (PPCIe) confidential computing on an
8-GPU HGX H800 system. All 8 GPUs and 4 NVSwitches are passed through to an
Intel TDX confidential VM.

GPU and NVSwitch evidence collection succeeds, but the official PPCIe
verification flow cannot complete because the production RIM service does not
contain the exact VBIOS RIM requested by the verifier:

NV_GPU_VBIOS_G520_0205_865_9600DA000E

The verifier reports: NVAT 104: RIM Not Found.

An authenticated HTTP GET request to the production RIM service also returns:

HTTP 404
{"message":"RIM_NOT_FOUND", ...}

To Reproduce

  1. Deploy an 8-GPU HGX H800 system in PPCIe confidential-computing mode.

  2. Pass all 8 GPUs and 4 NVSwitches through to an Intel TDX CVM.

  3. Collect nonce-bound GPU and NVSwitch evidence.

  4. Run the official PPCIe verification flow.

  5. The verifier derives the following VBIOS RIM ID: NV_GPU_VBIOS_G520_0205_865_9600DA000E. The verifier fails with NVAT 104: RIM Not Found.

Expected behavior
If this HGX H800 platform and VBIOS build are supported for production PPCIe
attestation, the exact NVIDIA-signed VBIOS RIM should be available from the
production RIM service, allowing the verifier to compare runtime measurements
against the reference measurements.
If this exact platform or VBIOS build is not supported, the documentation or
verifier should identify the supported H800 firmware and software combination
instead of reporting only that the RIM is missing.

Environment (please provide the following information):

This bug is not environment-relevant.

Relevant log output
Please paste relevant error and log output here.

Additional context
Add any other context about the problem here.

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't workingneeds-triageNeeds triage

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions