Enroll Compute Node Using Azure Marketplace
- First, generate a Join Token using Fortanix CCM UI. To generate your Join Token, please log in to https://ccm.fortanix.com and in the Infrastructure tab, click the + ENROLL NODE in the Compute Nodes page.
Figure 1: Enroll compute node - Click COPY to copy the Join Token. This Join Token is used by the compute node to authenticate itself.
Figure 2: Copy Join Token - Visit https://azuremarketplace.microsoft.com/en-us/marketplace/apps/fortanix.rte_node_agent to create the Node Agent VM to register the compute node.
- Click the GET IT NOW button in the “Fortanix Confidential Computing Node Agent” page.
Figure 3: Get the node agent - Click Continue in the pop-up window.
Figure 4: Confirm creating app in Azure - In the Node Agent preview page, click Create.
Figure 5: Proceed to create a node agent - In the Create Fortanix Confidential Computing Node Agent form (Figure 6), fill all the necessary details.
- Information about the available regions can be found here.
- Information about the supported VMs can be found here.
- In the Join Token field, paste the join token that you generated using the Fortanix CCM UI.
- We strongly recommend using DCAP attestation as the Attestation Protocol while installing the node agent on azure VM.
- Click the Review + create button to validate the node agent details.
Figure 6: Validate node agent - Wait for the validation to pass.
- After the validation is successful, click Create to create the node agent.
Figure 7: Create node agent
Figure 8: node agent created - After the node agent is created, the compute node will be enrolled in the Fortanix CCM, you will see it under the Compute Nodes overview table.
Figure 9: Enrolled node - Add Labels: To control which applications are allowed to run on which nodes, we add Labels for applications and nodes in the form of “Key:Value” pairs. Refer to Application and Compute Node Policy Enforcement for more details.
- Suggested Labels – This field will show the top 10 labels that are frequently used by users of an account.
- Add Labels – Enter the Key and Value pair and click the LABEL button to save the label. The newly created label will appear in the Labels Added field. A user can also choose an existing label from the Suggested Labels field.
Example of a “Key:Value” pairs is – “Location:Location_name” where “Location
” is the Key and “Location_name” is the Value of the key such as “South UK
”.
- If we are adding labels for an application then it is mandatory to add the same labels on the node on which the application will run.
- A node can have multiple labels that belong to different applications. For example:
App1’s label => Location1: Value1
App2’s label => Location2: Value2
Then the Node can have labels => Location1: Value1 , Location2: Value2.Figure 10: Node label
Comments
Please sign in to leave a comment.