vcenter trusted infrastructure trust authority clusters attestation tpm2 endorsement keys: create spec

The create_spec structure contains information that describes a TPM endorsement key.

Only one of vcenter.trusted_infrastructure.trust_authority_clusters.attestation.tpm2.endorsement_keys.create_spec.public_key or vcenter.trusted_infrastructure.trust_authority_clusters.attestation.tpm2.endorsement_keys.create_spec.certificate must be specified.

. This structure was added in vSphere API 7.0.0.

Representation:

{
    "public_key""string",
    "name""obj-103",
    "certificate""string"
}

Attributes:

Name Type Description
Required
name string A unique name for the TPM endorsement key.

The unique name should be something that an administrator can use to easily identify the remote system. For example, the hostname, or hardware UUID.

. This attribute was added in vSphere API 7.0.0.

When clients pass a value of this structure as a parameter, the field must be an identifier for the resource type: com.vmware.vcenter.trusted_infrastructure.trust_authority_clusters.attestation.tpm2.EndorsementKey. When operations return a value of this structure as a result, the field will be an identifier for the resource type: com.vmware.vcenter.trusted_infrastructure.trust_authority_clusters.attestation.tpm2.EndorsementKey.

Optional
public_key string TPM public endorsement key in PEM format. This attribute was added in vSphere API 7.0.0.

Optional. If unset vcenter.trusted_infrastructure.trust_authority_clusters.attestation.tpm2.endorsement_keys.create_spec.certificate must be set.

certificate string TPM endorsement key certificate in PEM format.

When a endorsement key certificate is provided, it will be verified against the CA certificate list. Endorsement key certificates that are not signed by one of the CA certificates will be rejected.

Using this format allows for failures to be caught during configuration rather than later during attestation.

. This attribute was added in vSphere API 7.0.0.

Optional. If unset vcenter.trusted_infrastructure.trust_authority_clusters.attestation.tpm2.endorsement_keys.create_spec.public_key must be set.