Running EDP Applications on Confidential Computing Manager

1.0 Introduction

This article describes how to create and run an Enclave Development Platform (EDP) application using Fortanix Confidential Computing Manager (CCM).

To create an application using Fortanix Rust EDP, refer to Bringing EDP Rust Apps to Confidential Computing Manager. After creating the application, obtain the enclave SIGSTRUCT file generated during the application signing process.

The SIGSTRUCT file is used to register the enclave with Fortanix CCM. After the application is registered and the build is approved, the application can run on a compute node enrolled with CCM and obtain certificates from Fortanix CCM for secure communication.

2.0 Run an Application on Fortanix CCM

Step 2: Create and Select an Account

Create or select a Fortanix Armor account. For detailed instructions, refer to Getting Started with Fortanix Armor.

Step 3: Create an Application

Perform the following steps to create an application using the Fortanix CCM UI:

In the CCM UI left navigation panel, navigate to Applications, and then on the ACTIVE APPLICATION tab and click ADD APPLICATION.
In the Add application dialog box, select EDP and click NEXT.
In the Add application form, enter the application details and click ADD APPLICATION.

For detailed instructions, refer to Add Application.

Step 4: Create an Application Build

Perform the following steps to create a build using the Fortanix CCM UI:

In the application details page, go to BUILDS tab and click ADD BUILD.
In the Add Build form:
1. Build Version - Enter the valid version number of the build.
2. Image Type - Select the required radio button for image type.
3. Enclave Configuration SIGSTRUCT - Choose one of the options to add the SIGSTRUCT details. The SIGSTRUCT for an enclave is generated when an application is signed. It is used to register the enclave with Fortanix CCM.
Click ADD BUILD.