Skip to content

Commit

Permalink
docs: adapt to Azure DCAP client removal
Browse files Browse the repository at this point in the history
  • Loading branch information
thomasten committed Aug 21, 2023
1 parent a59f25d commit 452a539
Show file tree
Hide file tree
Showing 2 changed files with 6 additions and 7 deletions.
8 changes: 4 additions & 4 deletions docs/docs/deployment/kubernetes.md
Original file line number Diff line number Diff line change
Expand Up @@ -190,13 +190,14 @@ If you're using an ingress-controller or gateway for managing access to the `coo

## DCAP configuration

By default the Coordinator will generate its quote using the [Azure-DCAP-Client](https://github.com/microsoft/Azure-DCAP-Client). If you choose to use this, no additional steps are required.
If you want to use a PCCS other than Azure's you can do so by setting the [necessary configuration](https://github.com/intel/SGXDataCenterAttestationPrimitives/blob/master/QuoteGeneration/qpl/README.md#configuration) during installation:
By default, the Coordinator's quote provider is configured to generate its quote using the Azure PCCS.
If you're running on Azure, no additional steps are required.
Otherwise, set the [necessary configuration](https://github.com/intel/SGXDataCenterAttestationPrimitives/blob/master/QuoteGeneration/qpl/README.md#configuration) during installation:

* Using the CLI

```bash
marblerun install --dcap-qpl intel --dcap-pccs-url <PCCS_URL> --dcap-secure-cert <TRUE/FALSE>
marblerun install --dcap-pccs-url <PCCS_URL> --dcap-secure-cert <TRUE/FALSE>
```

* Using Helm
Expand All @@ -206,7 +207,6 @@ If you want to use a PCCS other than Azure's you can do so by setting the [neces
--create-namespace \
-n marblerun \
--set coordinator.hostname=mycluster.uksouth.cloudapp.azure.com \
--set dcap.qpl=intel \
--set dcap.pccsUrl=<PCCS_URL> \
--set dcap.useSecureCert=<TRUE/FALSE>
```
5 changes: 2 additions & 3 deletions docs/docs/deployment/platforms/on-prem.md
Original file line number Diff line number Diff line change
Expand Up @@ -80,9 +80,8 @@ You currently have two options regarding PCCS for your on-premises machines and

If refreshing CRL fails, you can manually delete the `pckcache.db` database (default location `/opt/intel/sgx-dcap-pccs/pckcache.db`) and restart your PCCS.

The docker image for the [MarbleRun Coordinator](https://github.com/edgelesssys/marblerun/pkgs/container/marblerun%2Fcoordinator) comes with both the Azure-DCAP-Client and the default quote provider library by Intel.
To use your own PCCS, select the Intel library by starting a container with the environment variable `DCAP_LIBRARY=intel`, and mount the desired configuration to `/etc/sgx_default_qcnl.conf`.
Similarly, the [EGo image](https://github.com/orgs/edgelesssys/packages?repo_name=ego) comes preinstalled with both libraries.
The docker image for the [MarbleRun Coordinator](https://github.com/edgelesssys/marblerun/pkgs/container/marblerun%2Fcoordinator) comes with the default quote provider library by Intel.
Mount the desired configuration to `/etc/sgx_default_qcnl.conf`.

## Deploy MarbleRun

Expand Down

0 comments on commit 452a539

Please sign in to comment.