Add Attestation related D-bus Interface
Attestation provides critical and pertinent
security information about a specific device, system, software
element, or other managed entity.
Three relevant interfaces are defined as below.
ComponentIntegrity describes integrity of a component, including
what protocol used to measure the integrity, when was the integrity
info last updated, whether the integrity measurement is enabled, etc.
Some associations have been added to this interface, including a link
to the trusted component that the integrity object is reporting,
and a link to the systems that the integrity object is protecting.
IdentityAuthentication describes the identity verification status. It
also has two associations defined, one is a link to the requester's
certificate, the other one for the responder.
MeasurementSet defines the dbus method to get SPDM measurements.
These three interfaces are grouped under a new directory Attestation as
they are used to expose identity/integrity/measurement information for
an attestation.
Signed-off-by: Zhichuang Sun <zhichuang@google.com>
Change-Id: Iac86dfc63c85af04985a61ba52161301134e8f2b
diff --git a/yaml/xyz/openbmc_project/Inventory/Item.interface.yaml b/yaml/xyz/openbmc_project/Inventory/Item.interface.yaml
index 4eec2bb..4319b02 100644
--- a/yaml/xyz/openbmc_project/Inventory/Item.interface.yaml
+++ b/yaml/xyz/openbmc_project/Inventory/Item.interface.yaml
@@ -94,6 +94,14 @@
- inventory
required_endpoint_interfaces:
- xyz.openbmc_project.Sensor.Value
+ - name: authenticated_by
+ description: >
+ Objects that implement Item can optionally implement the
+ "authenticated_by" association to provide a link to the component
+ integrity object that authenticates this item.
+ reverse_name: authenticating
+ required_endpoint_interfaces:
+ - xyz.openbmc_project.Attestation.ComponentIntegrity
paths:
- namespace: /xyz/openbmc_project/inventory