nv-local-gpu-verifier 2.6.1

A Python-based tool that validates GPU measurements by comparing GPU runtime measurements with authenticated golden measurements

• Verifier
  • System Requirements
  • Pre-requisites
  • Install
    • Step 1: Elevate to Root User Privileges (Optional)
    • Step 2: Create a new Python Virtual Environment
    • Installation
      • Method 1: Installation from Source
      • Method 2: From PyPI
    • Troubleshooting Installation Issues
  • Usage
  • Module details
    • rim
    • attestation
    • nvmlHandler
    • verifier
    • cc_admin
  • Compatibility
  • Claims and Troubleshooting information
  • License
  • Support

Verifier

The Verifier is a Python-based tool that validates GPU measurements by comparing an authenticated attestation report containing runtime measurements with authenticated golden measurements. Its purpose is to verify if the software and hardware state of the GPU are in accordance with the intended state. The Verifier tool is compatible with both single-GPU and multi-GPU systems.

System Requirements:

• NVIDIA Hopper H100 GPU or newer
• GPU SKU with Confidential Compute(CC)
• NVIDIA GPU driver installed

Pre-requisites:

Requires Python 3.8 or later.

Install

Step 1: Elevate to Root User Privileges (Optional)

If you want the verifier to set the GPU Ready State based on the Attestation results, you will need to elevate the user privileges to root before you execute the rest of the instructions. For use cases where the user does not intend to set the GPU Ready State (e.g., when using the Attestation SDK), you can install and run the Verifier tool without requiring sudo privileges.

sudo -i

Step 2: Create a new Python Virtual Environment

python3 -m venv  ./prodtest
source ./prodtest/bin/activate

Installation

Method 1: Installation from Source

git clone https://github.com/NVIDIA/nvtrust.git
cd nvtrust/guest_tools/gpu_verifiers/local_gpu_verifier
pip3 install .
python3 -m verifier.cc_admin

Method 2: From PyPI

pip3 install nv-local-gpu-verifier
python3 -m verifier.cc_admin

Troubleshooting Installation Issues

• If you encounter any pip related issues while building the package, please execute the following commands to update to the latest versions of setuptools and pip

    python3 -m pip install --upgrade setuptools
    pip install -U pip
  

• If you encounter any permission issues while building the package, please execute the following commands and then build the package again

    cd local_gpu_verifier
    rm -r build
  

• If you encounter subprocess-related issues while installing the package similar to the below:

     Installing build dependencies ... done
     Getting requirements to build wheel ... error
     error: subprocess-exited-with-error
     × Getting requirements to build wheel did not run successfully.
     │ exit code: 1
     ╰─> [2 lines of output]
         running egg_info
     error: Cannot update time stamp of directory 'src/nv_local_gpu_verifier.egg-info'
      [end of output]
     note: This error originates from a subprocess and is likely not a problem with pip.
     error: subprocess-exited-with-error
     × Getting requirements to build wheel did not run successfully.
     │ exit code: 1
     ╰─> See above for output.
  

  Kindly follow the below steps and then re-try the installation:

     rm -rf src/nv_local_gpu_verifier.egg-info 
     rm -rf /build
  

• If you encounter warning and installation issues similar to the below while installing the package: WARNING: Ignoring invalid distribution ~v-local-gpu-verifier <site-package-directory> Please execute the following commands to clean up packages that were not installed properly and then re-try the installation:

   rm -rf $(ls -l <site-packages-directory> | grep '~' | awk '{print $9}')
  

Usage

To run the cc_admin module, use the following command:

python3 -m verifier.cc_admin [-h] [-v] [--test_no_gpu] [--driver_rim DRIVER_RIM] [--vbios_rim VBIOS_RIM] [--user_mode] [--nonce] [--allow_hold_cert]

Option	Description
-h, --help	Show this help message and exit
-v, --verbose	Print more detailed output
--test_no_gpu	If there is no GPU and we need to test the verifier, no NVML APIs will be available, so the verifier will use hardcoded GPU info
--driver_rim DRIVER_RIM	The path to the driver RIM. If not provided, it will use the default file: /usr/share/nvidia/rim/RIM_GH100PROD.swidtag
--vbios_rim VBIOS_RIM	The path to the VBIOS RIM. If not provided, it will try to find the appropriate file in verifier_cc/samples/ directory for the VBIOS ROM flashed onto the GPU
--user_mode	Runs the GPU attestation in user mode
--allow_hold_cert	Continue attestation if the OCSP revocation status of the certificate in the RIM files is 'certificate_hold'
--nonce	Specify a Nonce for Attestation Report
--rim_root_cert RIM_ROOT_CERT	The absolute path to the root certificate is to be used for verifying the certificate chain of the driver and VBIOS RIM certificate chain
--rim_service_url RIM_SERVICE_URL	The URL to be used for fetching driver and VBIOS RIM files (e.g., https://rim.nvidia.com/rims/)
--ocsp_url OCSP_SERVICE_URL	The URL to be used for checking the revocation status of a certificate (e.g., https://ocsp.ndis.nvidia.com/)
--ocsp_nonce_disabled	Flag which indicates whether to include a nonce when calling OCSP. Only applicable for local GPU attestation. False by default
--service-key	Service key which is used to auth remote service calls to attestation services. None by default. Note: No valid service keys have been created by admins yet - using any key will result in attestation failure.
--claims_version	Specify the claims version to retrieve version-specific attestation claims (e.g., 2.0). Please refer to the Attestation Troubleshooting documentation for the claims. If the claims version is not set, it defaults to 2.0.

If you need information about any function, use

help(function_name)

For example:

e.g. help(verify_measurement_signature)

Module details:

rim

The RIM (Reference Integrity Manifest) is a manifest containing golden measurements for the GPU. You can find the TCG RIM specification at the following link: TCG RIM Specification. The RIM module performs the parsing and schema validation of the base RIM against the SWID tag schema and XML signature schema. It then performs the signature verification of the base RIM.

attestation

The Attestation module is capable of extracting the measurements and the measurement signature. It then performs signature verification. DMTF's SPDM 1.1 MEASUREMENT response message is used as the attestation report. You can find the SPDM 1.1 specification at the following link: SPDM 1.1 Specification.

nvmlHandler

The nvmlHandler module uses the NVML API calls to retrieve GPU information, including the driver version, GPU certificates, attestation report, and more.

verifier

The verifier module uses the RIM attestation module for parsing the attestation report and performing a runtime comparison of the measurements in the attestation report against the golden measurements stored in RIM.

cc_admin

The cc_admin module retrieves the GPU information, attestation report, and the driver RIM associated with the driver version. It then proceeds with the authentication of the driver RIM and the attestation report. Afterward, it executes the verifier tool to compare the runtime measurements in the attestation report with the golden measurements stored in the driver RIM.

Compatibility

• Use the latest GPU verifier version for optimal compatibility with the most recent drivers.
• For attestation-specific platforms like Blackwell, ensure device-specific CC-enabled drivers are installed (e.g., R575 for Blackwell).

Claims and Troubleshooting information

For local and remote verifier claims information for NVIDIA GPUs, switches, and related troubleshooting information, please refer to the Attestation Troubleshooting documentation.

License

This repository is licensed under Apache License v2.0 except where otherwise noted.

Support

For issues or questions, please file a bug. For additional support, contact us at [e-mail]