NVIDIA / nvtrust

Ancillary open source software to support confidential computing on NVIDIA GPUs
Apache License 2.0
194 stars 26 forks source link

RIM service has no file NV_GPU_VBIOS_G520_0280_895_96009D0002 #66

Open nanometerzhu opened 1 month ago

nanometerzhu commented 1 month ago

With curl -X GET "https://rim.attestation.nvidia.com/v1/rim/ids" -H "accept: application/json", the newest version RIM service supports is NV_GPU_VBIOS_G520_0280_895_9600990008. However, we have a H200 with newer BIOS version: 96.00.9d.00.02. The RIM file NV_GPU_VBIOS_G520_0280_895_96009D0002, requests by verifier.cc_admin, is not existed.

Attached the full message here:

The system is running in CC DevTools mode !!
Number of GPUs available : 1
-----------------------------------
Fetching GPU 0 information from GPU driver.
Using the Nonce generated by Local GPU Verifier
VERIFYING GPU : 0
  Driver version fetched : 550.90.07
  VBIOS version fetched : 96.00.9d.00.02
  Validating GPU certificate chains.
    The firmware ID in the device certificate chain is matching with the one in the attestation report.
    GPU attestation report certificate chain validation successful.
      The certificate chain revocation status verification successful.
  Authenticating attestation report
    The nonce in the SPDM GET MEASUREMENT request message is matching with the generated nonce.
    Driver version fetched from the attestation report : 550.90.07
    VBIOS version fetched from the attestation report : 96.00.9d.00.02
    Attestation report signature verification successful.
    Attestation report verification successful.
  Authenticating the RIMs.
    Authenticating Driver RIM
      Fetching the driver RIM from the RIM service.
      RIM Schema validation passed.
      driver RIM certificate chain verification successful.
      The certificate chain revocation status verification successful.
      driver RIM signature verification successful.
      Driver RIM verification successful
    Authenticating VBIOS RIM.
      Fetching the VBIOS RIM from the RIM service.
Exception in thread Thread-21 (function_caller):
Traceback (most recent call last):
  File "/root/miniconda3/envs/nvAttest/lib/python3.10/site-packages/verifier/cc_admin_utils.py", line 342, in fetch_rim_file
    with request.urlopen(BaseSettings.RIM_SERVICE_BASE_URL + file_id) as https_response:
  File "/root/miniconda3/envs/nvAttest/lib/python3.10/urllib/request.py", line 216, in urlopen
    return opener.open(url, data, timeout)
  File "/root/miniconda3/envs/nvAttest/lib/python3.10/urllib/request.py", line 525, in open
    response = meth(req, response)
  File "/root/miniconda3/envs/nvAttest/lib/python3.10/urllib/request.py", line 634, in http_response
    response = self.parent.error(
  File "/root/miniconda3/envs/nvAttest/lib/python3.10/urllib/request.py", line 563, in error
    return self._call_chain(*args)
  File "/root/miniconda3/envs/nvAttest/lib/python3.10/urllib/request.py", line 496, in _call_chain
    result = func(*args)
  File "/root/miniconda3/envs/nvAttest/lib/python3.10/urllib/request.py", line 643, in http_error_default
    raise HTTPError(req.full_url, code, msg, hdrs, fp)
urllib.error.HTTPError: HTTP Error 404: Not Found

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/root/miniconda3/envs/nvAttest/lib/python3.10/threading.py", line 1016, in _bootstrap_inner
    self.run()
  File "/root/miniconda3/envs/nvAttest/lib/python3.10/threading.py", line 953, in run
    self._target(*self._args, **self._kwargs)
  File "/root/miniconda3/envs/nvAttest/lib/python3.10/site-packages/verifier/utils/__init__.py", line 202, in function_caller
    result = function(*arguments)
  File "/root/miniconda3/envs/nvAttest/lib/python3.10/site-packages/verifier/cc_admin_utils.py", line 349, in fetch_rim_file
    raise RIMFetchError("Could not fetch the rim file : " + file_id)        
verifier.exceptions.RIMFetchError: Could not fetch the rim file : NV_GPU_VBIOS_G520_0280_895_96009D0002

Please add this RIM file so we can continue the H200 TEE verification.

thisiskarthikj commented 1 week ago

@nanometerzhu We will take a look and get back to you.