Local Attestation of TAs

2.7.1

Verify the local attestation function of a TA in the secure OS.

See Test Networking.

1. The TrustZone kit has been burnt into the server and the TrustZone license has been activated.
2. The REE patch has been loaded to the server. The CA and TA can be loaded and can communicate with each other properly.
3. The baseline hash value of the TA to be measured has been preset in the test TA.

1. Log in to the REE OS and load the TrustZone REE patch tzdriver. (See Expected Result 1.)

   insmod tzdriver

   /usr/bin/teecd &

2. Compile and generate the TA that you want to measure, and obtain its baseline measurement value.
3. Compile and generate a test TA. The test TA presets the baseline measurement value of the TA to be measured in step 2.
4. Run the test TA to send an attestation request to the TA that you want to measure. (See Expected Result 2.)
5. Load the TA that you want to measure and repeat step 4. (See Expected Result 3.)

1. The REE patch is loaded and no error information is displayed.
2. The TA attestation report fails to be obtained because the TA that you want to measure is not running.
3. The TA attestation report is obtained and the measurement value in the report is the same as the baseline measurement value.

Ask the Huawei R&D to provide the TA and CA source code and binary files for the test.