Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
Junos CLI Reference
Table of Contents Expand all
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

request-system-integrity-attestation

date_range 19-Nov-23

Syntax

content_copy zoom_out_map
request system integrity attestation (pcr-index pcr number | nonce-value | tpm-name)

Description

The Attester is a device on the network that provides evidence to the Verifier on demand. The first part of that evidence is a signed collection of the TPM's Platform Configuration Registers (PCRs) called a TPM Quote. To ensure the freshness of the quote, the Verifier sends a random nonce to the Attester to include in the TPM Quote.

Options

nonce-value

Defines a base-64 encoded 20 byte random hex value. A cryptographically generated random number which should not be predictable prior to its issuance from a random number generation function. The random number MUST be derived from an entropy source external to the Attester.

pcr-index

The numbers/indexes of the PCRs. At the moment this is limited to 32 items. (0..31)

tpm-name

Unique system generated name for a TPM on a device.

Required Privilege Level

view

Output Fields

When you enter this command, you are provided feedback on the status of your request.

Sample Output

request system integrity attestation nonce-value $NONCE tpm-name $SERIAL_NUMBER

content_copy zoom_out_map
user@host> request system integrity attestation nonce-value $NONCE tpm-name $SERIAL_NUMBER

Release Information

Command introduced in Junos OS Release 22.4R1.

footer-navigation