-
Notifications
You must be signed in to change notification settings - Fork 81
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Signing enclave images with HSM/KSM #204
Labels
enhancement
New feature or request
Comments
Thank you for the feature request. There are two topics here:
|
@petreeftime I guess that now, that you merged awslabs/aws-nitro-enclaves-cose#5, it's possible to add the requested functionality to the CLI. |
Yes, it should be possible to add support for this. |
This was referenced Aug 29, 2022
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Currently the only option to sign an enclave image is to pass the private key and the certificate to build-enclave command. However, it prevents storing the key in a secure storage like HSM or KSM, and using it only for signing without retrieving the key itself.
One solution is to allow to add the signature after the enclave was created, so the signature can be produced independently from the enclave creation.
The text was updated successfully, but these errors were encountered: