A YANG Data Model for Challenge-Response-based Remote Attestation Procedures using TPMs
Shwetha Bhandari, Michael Eckel, Guy C. Fedorkow, Henk Birkholz, Bill Sulzen, Tom Laffey, Liang Xia, Eric Voit · 2020
This document defines a YANG RPC and a minimal datastore required to retrieve attestation evidence about integrity measurements from a device following the operational context defined in [I-D.ietf-rats- tpm-based-network-device-attest]. Complementary measurement logs are also provided by the YANG RPC originating from one or more roots of trust of measurement. The module defined requires at least one TPM 1.2 or TPM 2.0 and corresponding Trusted Software Stack included in the device components of the composite device the YANG server is running on.