Skip to content

Command line tool for AWS Nitro Security Module

Notifications You must be signed in to change notification settings

mrgatto/nsm-cli

Repository files navigation

Nitro Security Module (NSM) Cli

This is a command line tool for AWS Nitro Security Module.

Nitro Enclaves only support Linux, so this package is not intended to be used on other OSs or architectures outside enclaves.

All outputs are JSON format.

Build

rustup target install x86_64-unknown-linux-musl
cargo build --release --target=x86_64-unknown-linux-musl

or with Docker (not required Rust and musl-gcc installed):

docker run -v $PWD:/volume --rm -t clux/muslrust cargo build --release

Usage

Nitro Security Module Cli

USAGE:
    nsm-cli [SUBCOMMAND]

FLAGS:
    -h, --help       Prints help information
    -V, --version    Prints version information

SUBCOMMANDS:
    attestation     Create an AttestationDoc and sign it with it's private key to ensure authenticity
    describe-nsm    Returns capabilities and version of the connected NitroSecureModule
    describe-pcr    Read data from PlatformConfigurationRegister at some index
    get-random      Returns 256 bytes of pseudo-random numbers (entropy)
    help            Prints this message or the help of the given subcommand(s)

Output examples

Attestation Document validation

Examples:

About

Command line tool for AWS Nitro Security Module

Topics

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published