User's Guide: Logging in

1.0 Working in CCM - Administration

In the Fortanix Confidential Computing Manager (CCM), you can perform administration tasks such as signing up, logging in, creating an account, managing your application deployment, assign access, and handle approval requests. You can also view the nodes in your cluster and their attestation status, tasks, and audit logs of cluster events. To get started, sign up.

1.1 Sign Up

Steps:

  1. Visit https://ccm.fortanix.com/ to get started.

  2. Click the SIGN UP button on the top-right corner of the page.  

    CCMUserguide42.png
    Figure 1: Sign Up
  3. Fill the Sign Up form and enter the necessary details such as Email, First name, Last name, Create password, Retype password.  

    CCMUserguide43.png

    Figure 2: Sign Up Form

    NOTE

    The minimum password length required is 8 characters (letters, numbers, !, %,$)

  4. Select the check box “I agree to Terms and Conditions and Privacy Policy”.

  5. Select the check box “I’m not a robot” and click SIGN UP.  

    CCMUserguide44.png

    Figure 3: Sign Up

  6. After you sign up, the administrator will receive an email to approve this request. After the administrator approves it, you will receive an email notification regarding the approval of the request.

  7. You will also review an email to verify your email address. Click CONFIRM EMAIL in the email to verify your email. You will be redirected to the CCM UI. Click PROCEED in the CCM UI.  

    CCM_4a.png

    Figure 4: Email Confirmed

  8. After signing up, the user can log in successfully to the CCM.

1.2 Log In

Prerequisites:

  • Fortanix CCM account.

  • A user added in Fortanix CCM with relevant permissions to access the functionality of this service.

Steps:

  1. Visit https://ccm.fortanix.com/.

  2. Enter your E-mail and Password.

  3. If you have set up Single Sign-On (SSO) for your account then click LOG IN WITH SSO.  

    CCMUserguide45.png
    Figure 5: Logging In

    For more details on how to enable SSO using Azure Active Directory refer to Azure AD Authentication Guide.

  4. Click LOG IN to log in to Fortanix CCM.

  5. After you log in, create an account using the CCM Accounts page to proceed.

    Corvin4.png

    Figure 6: Accounts Page

    To create an account, refer to the “Create Account” section below.

1.3 Change Password

Steps:

  1. In the CCM UI, click the drop-down menu associated with the user's name on the top-right of the UI.

  2. From the menu, click My profile.  

    Corvin5.png

    Figure 7: My Profile

  3. On the My profile page, click the CHANGE PASSWORD button.  

    CCMUserguide48.png

    Figure 8: Change Password

  4. Enter the Current Password and type the New Password two times.  

    CCMUserguide49.png

    Figure 9: New Password

  5. Click CHANGE PASSWORD button to save changes. 

1.4 Create an Account

A CCM account is the top-level container for applications, images, and nodes. An account is generally associated with an organization, rather than an individual. Different accounts are fully isolated from each other. A user can either create a new account or join an existing account. To join an account, an account administrator must invite a user using the user’s email address through the Invite User workflow explained in the User’s Guide: Invite Users. The user needs to contact the account administrator to join an existing account. Upon accepting the invitation to join the account, the user will be added to it.

1.4.1 Disable Fortanix CCM Attestation

If you have a server or laptop that is unable to attest to Intel’s IAS attestation service, but you still want Fortanix CCM to pass attestation so that your compute node can be successfully enrolled to Fortanix CCM, you can create an account with the "test-only deployment" policy. This policy allows the compute nodes to bypass the IAS attestation service, thereby enabling the enrollment of compute nodes that do not fully qualify for the IAS attestation. Refer to step 3 below to bypass IAS attestation.

Prerequisites:

You need to be an account administrator for the account.

Steps:

  1. After you sign up and log in, you will be taken to the Accounts page. Click ADD ACCOUNT to create a new account.  

    Corvin9.png

    Figure 10: Create an Account

  2. Enter a name for the new account and optionally add a custom logo for the account.

  3. To allow compute nodes to bypass Intel's IAS attestation and successfully enroll regardless of attestation failing, click the check box “This is a test-only deployment”.

  4. Click CREATE ACCOUNT to complete the account creation.  

    CCM_IAS_Bypass1.png

    Figure 11: Create Account Complete

  5. The account is now successfully created.  

    CCM_13a.png

    Figure 12: Account Created Successfully

  6. Click SELECT ACCOUNT to select the newly created account. Click GO TO ACCOUNT to enter the account and start enrolling the compute nodes and creating applications.

  7. If you disabled the attestation for compute nodes, you would see a warning in the Fortanix CCM dashboard “Test-only deployment: Compute nodes can be enrolled into Fortanix CCM without attesting to Intel’s IAS attestation service”.

    CCM_IAS_Bypass3.png

    Figure 13: Test-Only Deployment

NOTE

The account name and logo can be updated using the CUSTOMIZE option on the account's card.

CCMUserguide52.png

Figure 14: Customize Account

1.5 Leave an Account

A user has the option to leave an account.

Steps:

To leave an account:

  1. Click the overflow menu on the account card.  

    CCMUserguide53.png

    Figure 15: Leave an Account

  2. Click LEAVE ACCOUNT to leave an account that you had previously joined.

NOTE

To leave an account, you must be a user with an editor or viewer role. If you are an administrator of an account, then to leave an account you must ensure that there is one more user in the account with an administrator role. If you are the only admin of an account, then you can choose to delete the account instead.