How to configure trusted CA to outside parties

To allow an SGX application to access outside services, we need the certificate authority (CA) public key.
Each account has its certificate authority, so applications will have a different parent CA based on their respective accounts.

1.0 How to obtain an account CA public key

High-level steps include:

• Sign up and log in to Fortanix Armor. For detailed instructions, refer to Getting Started with Fortanix Armor.  

• List accounts   

• Select account

• List zones

This can be obtained using the REST API calls:

1. To log in to Fortanix Armor and select an account, refer to Sections 3.1 through 3.3 in Using Fortanix Confidential Computing Manager to Build an Enclave OS Nginx Application.

2. Get the list of zones and save the zone certificate to a file:

   curl -b $cpath -c $cpath -H "X-CSRF-Header:true" https://armor.fortanix.com/api/v1/confidential_computing/zones | jq '.[0].certificate' -r > zone_ca.pem

2.0 How to configure external services