com.vmware.vcenter.confidential_computing package

Submodules

com.vmware.vcenter.confidential_computing.sgx_client module

The com.vmware.vcenter.confidential_computing.sgx_client module covers VC functionality to work with Intel CPUs Software Guard Extensions (SGX) on the hosts.

Software Guard Extensions (SGX) is a feature of recent Intel CPUs that allows users applications to create secure regions of memory-called enclaves-inside their address space. An enclave is opaque to all software running outside of the enclave, including the operating system and the hypervisor. In addition to this isolation functionality, Intel SGX also provides remote attestation capabilities, allowing external entities to verify that a specific SGX enclave is running on a host. An enclave’s attestation quote is rooted on an Intel-issued Platform Certification Key (PCK) certificate that binds the current platform’s SGX cryptographic identity to Intel, essentially certifying that it is a valid Intel SGX platform.

class com.vmware.vcenter.confidential_computing.sgx_client.Hosts(config)

Bases: vmware.vapi.bindings.stub.VapiInterface

The Hosts classes provides methods to register Intel Software Guard Extensions (SGX) for the hosts. This class was added in vSphere API 8.0.0.1.

Parameters: config (vmware.vapi.bindings.stub.StubConfiguration) – Configuration to be used for creating the stub.

class RegisterSpec(host_id=None)

Bases: vmware.vapi.bindings.struct.VapiStruct

The Hosts.RegisterSpec class contains the data necessary to identify the host. This class was added in vSphere API 8.0.0.1.

Tip

The arguments are used to initialize data attributes with the same names.

Parameters: host_id (str) – The host’s identifier. This attribute was added in vSphere API 8.0.0.1. When clients pass a value of this class as a parameter, the attribute must be an identifier for the resource type: HostSystem. When methods return a value of this class as a return value, the attribute will be an identifier for the resource type: HostSystem.

register_task(spec)

Register host by stored SGX configuration. This method was added in vSphere API 8.0.0.1.

Parameters: spec (Hosts.RegisterSpec) – Described the host that need to be registered.
Raise: com.vmware.vapi.std.errors_client.Error for any other error.
Raise: com.vmware.vapi.std.errors_client.NotFound if the host ID is not valid.
Raise: com.vmware.vapi.std.errors_client.ResourceBusy if register for same host is already in progress.
Raise: com.vmware.vapi.std.errors_client.Unauthenticated if the user can not be authenticated.
Raise: com.vmware.vapi.std.errors_client.Unsupported if the system does not support SGX Registration.

class com.vmware.vcenter.confidential_computing.sgx_client.StubFactory(stub_config)

Bases: vmware.vapi.bindings.stub.StubFactoryBase

Initialize StubFactoryBase

Parameters: stub_config (vmware.vapi.bindings.stub.StubConfiguration) – Stub config instance