1.0 Introduction
This article describes the steps to approve application domains and build in Fortanix Confidential Computing Manager (CCM). Users can use the Fortanix CCM user interface (UI) to approve and manage containerized applications.
2.0 Domain Approval
An application with an approved domain receives a TLS certificate from Fortanix CCM. This certificate includes the domain as the subject name, which allows requests for the domain to be served by the application. If the domain is not approved, the build can still run, but Fortanix CCM does not issue a TLS certificate for the application.
Prerequisites: Ensure that an application is created with a new domain.
Add Fortanix Armor Identity and Access Management (IAM) group as described in Add a Group.
Add an application with a domain as described in Add Application.
After the application is created successfully, click Tasks in the CCM UI left navigation panel to review the domain approval task.
Figure 1: Tasks for Domain Approval
A domain approval task is created for the application. Click the task, and then click APPROVE to approve the request.
Any user with the Administrator or Editor role can approve the task.
After the task is approved, the approved task appears with a summary in the Approved tab.
3.0 Approve the Application Build
After a build is created, when an application runs from the converted build, the application contacts Fortanix CCM to request a TLS certificate. If the build is not approved, the application can still run, but Fortanix CCM denies the TLS certificate request. If the TLS certificate request is denied, the application will not run.
To run applications in an enclave using certificates issued by Fortanix CCM, the build must be approved. When a build is created, an approval request is added to the Tasks page in the Fortanix CCM UI. You can use the CCM UI to approve or decline the request.
Prerequisites: Ensure that an application must be created successfully.
Perform the following steps to approve the application domain:
Create a build for the application as described in Create Application Build.
After the build is created, click Tasks in the CCM UI left navigation panel to review the application image approval task.
A build approval task is created for the application. Review the request, and then click APPROVE or DECLINE.
Figure 2: Tasks for App Build Approval
Any user with the Administrator or Editor role can approve a build approval task.
After the task is approved, click the Closed tab. The approved task appears with a summary.