Failed to verify TCB info

[pegahnikbakht]

Hi,

I extracted an attestation report from googel TDX VM and tried to verified it with the following command:

./check -in report -inform textproto -get_collateral true -check_crl true

But I get the following error:
FATAL: could not verify the TDX Quote: TDX TCB info reported by Intel PCS failed TCB status check: SVN at index 1(0) in Tcb.TdxTcbcomponents is not equal to TD Quote Body's index 1(1) TEE TCB svn value

Do I miss anything?

If I remove -get_collateral true -check_crl true from the check command it works fine.

[jrjatin]

It appears that TCB Info is not supported. When the get_collateral flag is set to true, it uses Intel's PCS API service to further verify quote data. You can refer to Intel's doc for more information: https://api.portal.trustedservices.intel.com/content/documentation.html#pcs-tcb-info-tdx-v4

[jrjatin]

#38
Please verify with these changes. This should fix the issue.