ComponentIntegrity
更新时间: 2025/05/25
在Gitcode上查看源码

ResourceDefinition

uris

  • /redfish/v1/ComponentIntegrity/component_integrity_id

properties

名称类型是否只读取值范围/枚举值说明
@odata.contextstringtrueComponentIntegrity资源模型的OData描述信息
@odata.idstringtrueComponentIntegrity资源节点的访问路径
@odata.typestringtrueComponentIntegrity资源类型
IdstringtrueComponentIntegrity资源的ID
NamestringtrueComponentIntegrity资源的名称
DescriptionstringtrueComponentIntegrity资源的描述
ComponentIntegrityTypestringtrueSPDM上报本完整性报告所使用的安全技术类型
ComponentIntegrityTypeVersionstringtrue上报本完整性报告所使用的安全技术的版本号
LastUpdatedstringtrue完整性报告最后刷新时间
TargetComponentURIstringtrue指向一个提供本报告中完整性信息的资源的链接
SPDMobjecttrue本资源基于SPDM协议呈现的完整性信息
SPDM.IdentityAuthenticationobjecttrue身份认证相关信息
SPDM.IdentityAuthentication.ResponderAuthenticationobjecttrue响应者的认证信息
SPDM.IdentityAuthentication.ResponderAuthentication.ComponentCertificateobjecttrue响应者证书集合资源
SPDM.IdentityAuthentication.ResponderAuthentication.ComponentCertificate.@odata.idstringtrue响应者证书集合资源访问路径
SPDM.MeasurementSetobjecttrue响应者的测量信息
SPDM.MeasurementSet.MeasurementSpecificationstringtrueDMTF请求方与响应方之间协商的测量规范
SPDM.MeasurementSet.MeasurementSummaryTypestringtrueTCB测量摘要的类型
SPDM.MeasurementSet.MeasurementSummaryHashAlgorithmstringtrue测量摘要使用的哈希算法
SPDM.MeasurementSet.MeasurementSummarystringtrue测量摘要
SPDM.MeasurementSet.Measurementsarraytrue响应者的测量块集合
SPDM.MeasurementSet.Measurements[].MeasurementIndexnumbertrue测量块的索引
SPDM.MeasurementSet.Measurements[].MeasurementHashAlgorithmstringtrue用于计算该测量块的hash算法
SPDM.MeasurementSet.Measurements[].Measurementstringtrue测量值
SPDM.MeasurementSet.Measurements[].LastUpdatedstringtrue本测量块的最后更新时间
SPDM.MeasurementSet.Measurements[].PartofSummaryHashbooleantrue该块是否为属于计算SummaryHash时使用的度量块的一部分
SPDM.MeasurementSet.Measurements[].MeasurementTypestringtrueFirmwareConfiguration、HardwareConfiguration、ImmutableROM、MeasurementManifest、MutableFirmware、MutableFirmwareSecurityVersionNumber、MutableFirmwareVersion该测量块所代表的数据类型或特征。仅当MeasurementSpecification为DMTF时,才会呈现本属性
SPDM.MeasurementSet.Measurements[].SecurityVersionNumberstringtrue测量值所代表的安全版本号。仅当MeasurementSpecification为DMTF且MeasurementType为MutableFirmwareSecurityVersionNumber时,才会呈现本属性
Statusobjecttrue完整性报告资源状态
Status.Statestringtrue是否使能
Status.Healthstringtrue健康状态

supported_methods

  • GET
  • POST

HTTP methods

GET

命令功能

查询组件完整性报告单个资源信息

命令格式

URL: https://device_ip/redfish/v1/ComponentIntegrity/component_integrity_id

请求头:


X-Auth-Token: 123456789***********************

请求消息体: 无

参数说明

参数参数说明取值
device_ip登录设备的IP地址IPv4或IPv6地址
component_integrity_id指定完整性报告的ID可通过完整性报告集合资源获得
auth_value执行该请求时,必须在"Headers"中携带"X-Auth-Token"值用于鉴权可通过/redfish/v1/SessionService/Sessions创建会话时获得

使用指南

BMC300 5.12.0.1及以上版本支持

使用实例

请求样例:

http
GET https://device_ip/redfish/v1/ComponentIntegrity/component_integrity_id

请求头:


X-Auth-Token: 123456789***********************

请求消息体:无

响应样例:

json
{
  "@odata.context": "/redfish/v1/$metadata#ComponentIntegrity.ComponentIntegrity",
  "@odata.id": "/redfish/v1/ComponentIntegrity/SPDM_0_1",
  "@odata.type": "#ComponentIntegrity.ComponentIntegrity",
  "Id": "SPDM_0_1",
  "Name": "Component Integrity",
  "Description": "SPDM Integrity Information for Controller_1 reported by SPDM_0",
  "ComponentIntegrityType": "SPDM",
  "ComponentIntegrityTypeVersion": "1.0",
  "LastUpdated": "1970-01-01T00:00:55Z",
  "TargetComponentURI": "/redfish/v1/Systems/1/Storages/RAIDStorage0",
  "SPDM": {
    "IdentityAuthentication": {
      "ResponderAuthentication": {
        "ComponentCertificate": {
          "@odata.id": "/redfish/v1/Chassis/1/TrustedComponents/SPDM_0/Certificates"
        }
      }
    },
    "MeasurementSet": {
      "MeasurementSpecification": "DMTF",
      "MeasurementSummaryType": "TCB",
      "MeasurementSummaryHashAlgorithm": "TPM_ALG_SHA_256",
      "MeasurementSummary": "0101010101010101010101010101010101010101010101010101010101010101",
      "Measurements": [
        {
          "MeasurementIndex": 1,
          "MeasurementHashAlgorithm": "TPM_ALG_SHA_256",
          "Measurement": "0000000000000000000000000000000000000000000000000000000000000000",
          "LastUpdated": "1970-01-01T00:00:55Z",
          "PartofSummaryHash": true,
          "MeasurementType": "FirmwareConfiguration"
        },
        {
          "MeasurementIndex": 2,
          "MeasurementHashAlgorithm": "TPM_ALG_SHA_256",
          "Measurement": "0000000000000000000000000000000000000000000000000000000000000001",
          "LastUpdated": "1970-01-01T00:00:55Z",
          "PartofSummaryHash": true,
          "MeasurementType": "FirmwareConfiguration"
        },
        {
          "MeasurementIndex": 3,
          "MeasurementHashAlgorithm": "TPM_ALG_SHA_256",
          "Measurement": "0000000000000000000000000000000000000000000000000000000000000002",
          "LastUpdated": "1970-01-01T00:00:55Z",
          "PartofSummaryHash": true,
          "MeasurementType": "FirmwareConfiguration"
        }
      ]
    }
  },
  "Status": {
    "State": "Enabled",
    "Health": "OK"
  },
  "Actions": {
    "#ComponentIntegrity.SPDMGetSignedMeasurements": {
      "target": "/redfish/v1/ComponentIntegrity/SPDM_0_1/Actions/ComponentIntegrity.SPDMGetSignedMeasurements",
      "@Redfish.ActionInfo": "/redfish/v1/ComponentIntegrity/SPDM_0_1/SPDMGetSignedMeasurementsActionInfo"
    }
  }
}

响应码:200

POST (ACTION)

SPDMGetSignedMeasurements

命令功能

基于SPDM协议获取组件签名测量值

命令格式

URL: https://device_ip/redfish/v1/ComponentIntegrity/component_integrity_id/Actions/ComponentIntegrity.SPDMGetSignedMeasurements

请求头:


X-Auth-Token: 123456789***********************
Content-Type: header_type

请求消息体:

json
{
  "MeasurementIndices": measurement_indices,
  "SlotId": slot_id,
  "Nonce": nonce
}

请求头参数说明

参见 请求头参数说明

请求体参数说明

参数参数说明取值
component_integrity_id指定完整性报告的ID可通过完整性报告集合资源获得
measurement_indices请求测量块的数组非必需参数,可选填如下几个使用方式:
1、[1~254] 中的一个或多个唯一值
2、[255]
3、无此参数,默认使用[255]
slot_id签名使用的证书槽位ID非必需参数,可选填如下几个使用方式:
1、0~7:指定使用特定槽位标识符的证书
2、无此参数,默认使用 0
nonce挑战随机数非必需参数,可选填如下几个使用方式:
1、有此参数时,需要遵循规则:`^[0-9a-fA-F]

ResourceDefinition

uris

  • /redfish/v1/ComponentIntegrity/component_integrity_id

properties

名称类型是否只读取值范围/枚举值说明
@odata.contextstringtrueComponentIntegrity资源模型的OData描述信息
@odata.idstringtrueComponentIntegrity资源节点的访问路径
@odata.typestringtrueComponentIntegrity资源类型
IdstringtrueComponentIntegrity资源的ID
NamestringtrueComponentIntegrity资源的名称
DescriptionstringtrueComponentIntegrity资源的描述
ComponentIntegrityTypestringtrueSPDM上报本完整性报告所使用的安全技术类型
ComponentIntegrityTypeVersionstringtrue上报本完整性报告所使用的安全技术的版本号
LastUpdatedstringtrue完整性报告最后刷新时间
TargetComponentURIstringtrue指向一个提供本报告中完整性信息的资源的链接
SPDMobjecttrue本资源基于SPDM协议呈现的完整性信息
SPDM.IdentityAuthenticationobjecttrue身份认证相关信息
SPDM.IdentityAuthentication.ResponderAuthenticationobjecttrue响应者的认证信息
SPDM.IdentityAuthentication.ResponderAuthentication.ComponentCertificateobjecttrue响应者证书集合资源
SPDM.IdentityAuthentication.ResponderAuthentication.ComponentCertificate.@odata.idstringtrue响应者证书集合资源访问路径
SPDM.MeasurementSetobjecttrue响应者的测量信息
SPDM.MeasurementSet.MeasurementSpecificationstringtrueDMTF请求方与响应方之间协商的测量规范
SPDM.MeasurementSet.MeasurementSummaryTypestringtrueTCB测量摘要的类型
SPDM.MeasurementSet.MeasurementSummaryHashAlgorithmstringtrue测量摘要使用的哈希算法
SPDM.MeasurementSet.MeasurementSummarystringtrue测量摘要
SPDM.MeasurementSet.Measurementsarraytrue响应者的测量块集合
SPDM.MeasurementSet.Measurements[].MeasurementIndexnumbertrue测量块的索引
SPDM.MeasurementSet.Measurements[].MeasurementHashAlgorithmstringtrue用于计算该测量块的hash算法
SPDM.MeasurementSet.Measurements[].Measurementstringtrue测量值
SPDM.MeasurementSet.Measurements[].LastUpdatedstringtrue本测量块的最后更新时间
SPDM.MeasurementSet.Measurements[].PartofSummaryHashbooleantrue该块是否为属于计算SummaryHash时使用的度量块的一部分
SPDM.MeasurementSet.Measurements[].MeasurementTypestringtrueFirmwareConfiguration、HardwareConfiguration、ImmutableROM、MeasurementManifest、MutableFirmware、MutableFirmwareSecurityVersionNumber、MutableFirmwareVersion该测量块所代表的数据类型或特征。仅当MeasurementSpecification为DMTF时,才会呈现本属性
SPDM.MeasurementSet.Measurements[].SecurityVersionNumberstringtrue测量值所代表的安全版本号。仅当MeasurementSpecification为DMTF且MeasurementType为MutableFirmwareSecurityVersionNumber时,才会呈现本属性
Statusobjecttrue完整性报告资源状态
Status.Statestringtrue是否使能
Status.Healthstringtrue健康状态

supported_methods

  • GET
  • POST

HTTP methods

GET

命令功能

查询组件完整性报告单个资源信息

命令格式

URL: https://device_ip/redfish/v1/ComponentIntegrity/component_integrity_id

请求头:


X-Auth-Token: 123456789***********************

请求消息体: 无

参数说明

参数参数说明取值
device_ip登录设备的IP地址IPv4或IPv6地址
component_integrity_id指定完整性报告的ID可通过完整性报告集合资源获得
auth_value执行该请求时,必须在"Headers"中携带"X-Auth-Token"值用于鉴权可通过/redfish/v1/SessionService/Sessions创建会话时获得

使用指南

BMC300 5.12.0.1及以上版本支持

使用实例

请求样例:

http
GET https://device_ip/redfish/v1/ComponentIntegrity/component_integrity_id

请求头:


X-Auth-Token: 123456789***********************

请求消息体:无

响应样例:

json
{
  "@odata.context": "/redfish/v1/$metadata#ComponentIntegrity.ComponentIntegrity",
  "@odata.id": "/redfish/v1/ComponentIntegrity/SPDM_0_1",
  "@odata.type": "#ComponentIntegrity.ComponentIntegrity",
  "Id": "SPDM_0_1",
  "Name": "Component Integrity",
  "Description": "SPDM Integrity Information for Controller_1 reported by SPDM_0",
  "ComponentIntegrityType": "SPDM",
  "ComponentIntegrityTypeVersion": "1.0",
  "LastUpdated": "1970-01-01T00:00:55Z",
  "TargetComponentURI": "/redfish/v1/Systems/1/Storages/RAIDStorage0",
  "SPDM": {
    "IdentityAuthentication": {
      "ResponderAuthentication": {
        "ComponentCertificate": {
          "@odata.id": "/redfish/v1/Chassis/1/TrustedComponents/SPDM_0/Certificates"
        }
      }
    },
    "MeasurementSet": {
      "MeasurementSpecification": "DMTF",
      "MeasurementSummaryType": "TCB",
      "MeasurementSummaryHashAlgorithm": "TPM_ALG_SHA_256",
      "MeasurementSummary": "0101010101010101010101010101010101010101010101010101010101010101",
      "Measurements": [
        {
          "MeasurementIndex": 1,
          "MeasurementHashAlgorithm": "TPM_ALG_SHA_256",
          "Measurement": "0000000000000000000000000000000000000000000000000000000000000000",
          "LastUpdated": "1970-01-01T00:00:55Z",
          "PartofSummaryHash": true,
          "MeasurementType": "FirmwareConfiguration"
        },
        {
          "MeasurementIndex": 2,
          "MeasurementHashAlgorithm": "TPM_ALG_SHA_256",
          "Measurement": "0000000000000000000000000000000000000000000000000000000000000001",
          "LastUpdated": "1970-01-01T00:00:55Z",
          "PartofSummaryHash": true,
          "MeasurementType": "FirmwareConfiguration"
        },
        {
          "MeasurementIndex": 3,
          "MeasurementHashAlgorithm": "TPM_ALG_SHA_256",
          "Measurement": "0000000000000000000000000000000000000000000000000000000000000002",
          "LastUpdated": "1970-01-01T00:00:55Z",
          "PartofSummaryHash": true,
          "MeasurementType": "FirmwareConfiguration"
        }
      ]
    }
  },
  "Status": {
    "State": "Enabled",
    "Health": "OK"
  },
  "Actions": {
    "#ComponentIntegrity.SPDMGetSignedMeasurements": {
      "target": "/redfish/v1/ComponentIntegrity/SPDM_0_1/Actions/ComponentIntegrity.SPDMGetSignedMeasurements",
      "@Redfish.ActionInfo": "/redfish/v1/ComponentIntegrity/SPDM_0_1/SPDMGetSignedMeasurementsActionInfo"
    }
  }
}

响应码:200

POST (ACTION)

SPDMGetSignedMeasurements

命令功能

基于SPDM协议获取组件签名测量值

命令格式

URL: https://device_ip/redfish/v1/ComponentIntegrity/component_integrity_id/Actions/ComponentIntegrity.SPDMGetSignedMeasurements

请求头:


X-Auth-Token: 123456789***********************
Content-Type: header_type

请求消息体:

json
{
  "MeasurementIndices": measurement_indices,
  "SlotId": slot_id,
  "Nonce": nonce
}

请求头参数说明

参见 请求头参数说明

请求体参数说明

参数参数说明取值
component_integrity_id指定完整性报告的ID可通过完整性报告集合资源获得
measurement_indices请求测量块的数组非必需参数,可选填如下几个使用方式:
1、[1~254] 中的一个或多个唯一值
2、[255]
3、无此参数,默认使用[255]
slot_id签名使用的证书槽位ID非必需参数,可选填如下几个使用方式:
1、0~7:指定使用特定槽位标识符的证书
2、无此参数,默认使用 0
nonce挑战随机数非必需参数,可选填如下几个使用方式:
1、有此参数时,需要遵循规则:
2、无此参数时,自行生成随机数,需要遵循规则:`^[0-9a-fA-F]

ResourceDefinition

uris

  • /redfish/v1/ComponentIntegrity/component_integrity_id

properties

名称类型是否只读取值范围/枚举值说明
@odata.contextstringtrueComponentIntegrity资源模型的OData描述信息
@odata.idstringtrueComponentIntegrity资源节点的访问路径
@odata.typestringtrueComponentIntegrity资源类型
IdstringtrueComponentIntegrity资源的ID
NamestringtrueComponentIntegrity资源的名称
DescriptionstringtrueComponentIntegrity资源的描述
ComponentIntegrityTypestringtrueSPDM上报本完整性报告所使用的安全技术类型
ComponentIntegrityTypeVersionstringtrue上报本完整性报告所使用的安全技术的版本号
LastUpdatedstringtrue完整性报告最后刷新时间
TargetComponentURIstringtrue指向一个提供本报告中完整性信息的资源的链接
SPDMobjecttrue本资源基于SPDM协议呈现的完整性信息
SPDM.IdentityAuthenticationobjecttrue身份认证相关信息
SPDM.IdentityAuthentication.ResponderAuthenticationobjecttrue响应者的认证信息
SPDM.IdentityAuthentication.ResponderAuthentication.ComponentCertificateobjecttrue响应者证书集合资源
SPDM.IdentityAuthentication.ResponderAuthentication.ComponentCertificate.@odata.idstringtrue响应者证书集合资源访问路径
SPDM.MeasurementSetobjecttrue响应者的测量信息
SPDM.MeasurementSet.MeasurementSpecificationstringtrueDMTF请求方与响应方之间协商的测量规范
SPDM.MeasurementSet.MeasurementSummaryTypestringtrueTCB测量摘要的类型
SPDM.MeasurementSet.MeasurementSummaryHashAlgorithmstringtrue测量摘要使用的哈希算法
SPDM.MeasurementSet.MeasurementSummarystringtrue测量摘要
SPDM.MeasurementSet.Measurementsarraytrue响应者的测量块集合
SPDM.MeasurementSet.Measurements[].MeasurementIndexnumbertrue测量块的索引
SPDM.MeasurementSet.Measurements[].MeasurementHashAlgorithmstringtrue用于计算该测量块的hash算法
SPDM.MeasurementSet.Measurements[].Measurementstringtrue测量值
SPDM.MeasurementSet.Measurements[].LastUpdatedstringtrue本测量块的最后更新时间
SPDM.MeasurementSet.Measurements[].PartofSummaryHashbooleantrue该块是否为属于计算SummaryHash时使用的度量块的一部分
SPDM.MeasurementSet.Measurements[].MeasurementTypestringtrueFirmwareConfiguration、HardwareConfiguration、ImmutableROM、MeasurementManifest、MutableFirmware、MutableFirmwareSecurityVersionNumber、MutableFirmwareVersion该测量块所代表的数据类型或特征。仅当MeasurementSpecification为DMTF时,才会呈现本属性
SPDM.MeasurementSet.Measurements[].SecurityVersionNumberstringtrue测量值所代表的安全版本号。仅当MeasurementSpecification为DMTF且MeasurementType为MutableFirmwareSecurityVersionNumber时,才会呈现本属性
Statusobjecttrue完整性报告资源状态
Status.Statestringtrue是否使能
Status.Healthstringtrue健康状态

supported_methods

  • GET
  • POST

HTTP methods

GET

命令功能

查询组件完整性报告单个资源信息

命令格式

URL: https://device_ip/redfish/v1/ComponentIntegrity/component_integrity_id

请求头:


X-Auth-Token: 123456789***********************

请求消息体: 无

参数说明

参数参数说明取值
device_ip登录设备的IP地址IPv4或IPv6地址
component_integrity_id指定完整性报告的ID可通过完整性报告集合资源获得
auth_value执行该请求时,必须在"Headers"中携带"X-Auth-Token"值用于鉴权可通过/redfish/v1/SessionService/Sessions创建会话时获得

使用指南

BMC300 5.12.0.1及以上版本支持

使用实例

请求样例:

http
GET https://device_ip/redfish/v1/ComponentIntegrity/component_integrity_id

请求头:


X-Auth-Token: 123456789***********************

请求消息体:无

响应样例:

json
{
  "@odata.context": "/redfish/v1/$metadata#ComponentIntegrity.ComponentIntegrity",
  "@odata.id": "/redfish/v1/ComponentIntegrity/SPDM_0_1",
  "@odata.type": "#ComponentIntegrity.ComponentIntegrity",
  "Id": "SPDM_0_1",
  "Name": "Component Integrity",
  "Description": "SPDM Integrity Information for Controller_1 reported by SPDM_0",
  "ComponentIntegrityType": "SPDM",
  "ComponentIntegrityTypeVersion": "1.0",
  "LastUpdated": "1970-01-01T00:00:55Z",
  "TargetComponentURI": "/redfish/v1/Systems/1/Storages/RAIDStorage0",
  "SPDM": {
    "IdentityAuthentication": {
      "ResponderAuthentication": {
        "ComponentCertificate": {
          "@odata.id": "/redfish/v1/Chassis/1/TrustedComponents/SPDM_0/Certificates"
        }
      }
    },
    "MeasurementSet": {
      "MeasurementSpecification": "DMTF",
      "MeasurementSummaryType": "TCB",
      "MeasurementSummaryHashAlgorithm": "TPM_ALG_SHA_256",
      "MeasurementSummary": "0101010101010101010101010101010101010101010101010101010101010101",
      "Measurements": [
        {
          "MeasurementIndex": 1,
          "MeasurementHashAlgorithm": "TPM_ALG_SHA_256",
          "Measurement": "0000000000000000000000000000000000000000000000000000000000000000",
          "LastUpdated": "1970-01-01T00:00:55Z",
          "PartofSummaryHash": true,
          "MeasurementType": "FirmwareConfiguration"
        },
        {
          "MeasurementIndex": 2,
          "MeasurementHashAlgorithm": "TPM_ALG_SHA_256",
          "Measurement": "0000000000000000000000000000000000000000000000000000000000000001",
          "LastUpdated": "1970-01-01T00:00:55Z",
          "PartofSummaryHash": true,
          "MeasurementType": "FirmwareConfiguration"
        },
        {
          "MeasurementIndex": 3,
          "MeasurementHashAlgorithm": "TPM_ALG_SHA_256",
          "Measurement": "0000000000000000000000000000000000000000000000000000000000000002",
          "LastUpdated": "1970-01-01T00:00:55Z",
          "PartofSummaryHash": true,
          "MeasurementType": "FirmwareConfiguration"
        }
      ]
    }
  },
  "Status": {
    "State": "Enabled",
    "Health": "OK"
  },
  "Actions": {
    "#ComponentIntegrity.SPDMGetSignedMeasurements": {
      "target": "/redfish/v1/ComponentIntegrity/SPDM_0_1/Actions/ComponentIntegrity.SPDMGetSignedMeasurements",
      "@Redfish.ActionInfo": "/redfish/v1/ComponentIntegrity/SPDM_0_1/SPDMGetSignedMeasurementsActionInfo"
    }
  }
}

响应码:200

POST (ACTION)

SPDMGetSignedMeasurements

命令功能

基于SPDM协议获取组件签名测量值

命令格式

URL: https://device_ip/redfish/v1/ComponentIntegrity/component_integrity_id/Actions/ComponentIntegrity.SPDMGetSignedMeasurements

请求头:


X-Auth-Token: 123456789***********************
Content-Type: header_type

请求消息体:

json
{
  "MeasurementIndices": measurement_indices,
  "SlotId": slot_id,
  "Nonce": nonce
}

请求头参数说明

参见 请求头参数说明

请求体参数说明

参数参数说明取值
component_integrity_id指定完整性报告的ID可通过完整性报告集合资源获得
measurement_indices请求测量块的数组非必需参数,可选填如下几个使用方式:
1、[1~254] 中的一个或多个唯一值
2、[255]
3、无此参数,默认使用[255]
slot_id签名使用的证书槽位ID非必需参数,可选填如下几个使用方式:
1、0~7:指定使用特定槽位标识符的证书
2、无此参数,默认使用 0
nonce挑战随机数非必需参数,可选填如下几个使用方式:
1、有此参数时,需要遵循规则:`^[0-9a-fA-F]

ResourceDefinition

uris

  • /redfish/v1/ComponentIntegrity/component_integrity_id

properties

名称类型是否只读取值范围/枚举值说明
@odata.contextstringtrueComponentIntegrity资源模型的OData描述信息
@odata.idstringtrueComponentIntegrity资源节点的访问路径
@odata.typestringtrueComponentIntegrity资源类型
IdstringtrueComponentIntegrity资源的ID
NamestringtrueComponentIntegrity资源的名称
DescriptionstringtrueComponentIntegrity资源的描述
ComponentIntegrityTypestringtrueSPDM上报本完整性报告所使用的安全技术类型
ComponentIntegrityTypeVersionstringtrue上报本完整性报告所使用的安全技术的版本号
LastUpdatedstringtrue完整性报告最后刷新时间
TargetComponentURIstringtrue指向一个提供本报告中完整性信息的资源的链接
SPDMobjecttrue本资源基于SPDM协议呈现的完整性信息
SPDM.IdentityAuthenticationobjecttrue身份认证相关信息
SPDM.IdentityAuthentication.ResponderAuthenticationobjecttrue响应者的认证信息
SPDM.IdentityAuthentication.ResponderAuthentication.ComponentCertificateobjecttrue响应者证书集合资源
SPDM.IdentityAuthentication.ResponderAuthentication.ComponentCertificate.@odata.idstringtrue响应者证书集合资源访问路径
SPDM.MeasurementSetobjecttrue响应者的测量信息
SPDM.MeasurementSet.MeasurementSpecificationstringtrueDMTF请求方与响应方之间协商的测量规范
SPDM.MeasurementSet.MeasurementSummaryTypestringtrueTCB测量摘要的类型
SPDM.MeasurementSet.MeasurementSummaryHashAlgorithmstringtrue测量摘要使用的哈希算法
SPDM.MeasurementSet.MeasurementSummarystringtrue测量摘要
SPDM.MeasurementSet.Measurementsarraytrue响应者的测量块集合
SPDM.MeasurementSet.Measurements[].MeasurementIndexnumbertrue测量块的索引
SPDM.MeasurementSet.Measurements[].MeasurementHashAlgorithmstringtrue用于计算该测量块的hash算法
SPDM.MeasurementSet.Measurements[].Measurementstringtrue测量值
SPDM.MeasurementSet.Measurements[].LastUpdatedstringtrue本测量块的最后更新时间
SPDM.MeasurementSet.Measurements[].PartofSummaryHashbooleantrue该块是否为属于计算SummaryHash时使用的度量块的一部分
SPDM.MeasurementSet.Measurements[].MeasurementTypestringtrueFirmwareConfiguration、HardwareConfiguration、ImmutableROM、MeasurementManifest、MutableFirmware、MutableFirmwareSecurityVersionNumber、MutableFirmwareVersion该测量块所代表的数据类型或特征。仅当MeasurementSpecification为DMTF时,才会呈现本属性
SPDM.MeasurementSet.Measurements[].SecurityVersionNumberstringtrue测量值所代表的安全版本号。仅当MeasurementSpecification为DMTF且MeasurementType为MutableFirmwareSecurityVersionNumber时,才会呈现本属性
Statusobjecttrue完整性报告资源状态
Status.Statestringtrue是否使能
Status.Healthstringtrue健康状态

supported_methods

  • GET
  • POST

HTTP methods

GET

命令功能

查询组件完整性报告单个资源信息

命令格式

URL: https://device_ip/redfish/v1/ComponentIntegrity/component_integrity_id

请求头:


X-Auth-Token: 123456789***********************

请求消息体: 无

参数说明

参数参数说明取值
device_ip登录设备的IP地址IPv4或IPv6地址
component_integrity_id指定完整性报告的ID可通过完整性报告集合资源获得
auth_value执行该请求时,必须在"Headers"中携带"X-Auth-Token"值用于鉴权可通过/redfish/v1/SessionService/Sessions创建会话时获得

使用指南

BMC300 5.12.0.1及以上版本支持

使用实例

请求样例:

http
GET https://device_ip/redfish/v1/ComponentIntegrity/component_integrity_id

请求头:


X-Auth-Token: 123456789***********************

请求消息体:无

响应样例:

json
{
  "@odata.context": "/redfish/v1/$metadata#ComponentIntegrity.ComponentIntegrity",
  "@odata.id": "/redfish/v1/ComponentIntegrity/SPDM_0_1",
  "@odata.type": "#ComponentIntegrity.ComponentIntegrity",
  "Id": "SPDM_0_1",
  "Name": "Component Integrity",
  "Description": "SPDM Integrity Information for Controller_1 reported by SPDM_0",
  "ComponentIntegrityType": "SPDM",
  "ComponentIntegrityTypeVersion": "1.0",
  "LastUpdated": "1970-01-01T00:00:55Z",
  "TargetComponentURI": "/redfish/v1/Systems/1/Storages/RAIDStorage0",
  "SPDM": {
    "IdentityAuthentication": {
      "ResponderAuthentication": {
        "ComponentCertificate": {
          "@odata.id": "/redfish/v1/Chassis/1/TrustedComponents/SPDM_0/Certificates"
        }
      }
    },
    "MeasurementSet": {
      "MeasurementSpecification": "DMTF",
      "MeasurementSummaryType": "TCB",
      "MeasurementSummaryHashAlgorithm": "TPM_ALG_SHA_256",
      "MeasurementSummary": "0101010101010101010101010101010101010101010101010101010101010101",
      "Measurements": [
        {
          "MeasurementIndex": 1,
          "MeasurementHashAlgorithm": "TPM_ALG_SHA_256",
          "Measurement": "0000000000000000000000000000000000000000000000000000000000000000",
          "LastUpdated": "1970-01-01T00:00:55Z",
          "PartofSummaryHash": true,
          "MeasurementType": "FirmwareConfiguration"
        },
        {
          "MeasurementIndex": 2,
          "MeasurementHashAlgorithm": "TPM_ALG_SHA_256",
          "Measurement": "0000000000000000000000000000000000000000000000000000000000000001",
          "LastUpdated": "1970-01-01T00:00:55Z",
          "PartofSummaryHash": true,
          "MeasurementType": "FirmwareConfiguration"
        },
        {
          "MeasurementIndex": 3,
          "MeasurementHashAlgorithm": "TPM_ALG_SHA_256",
          "Measurement": "0000000000000000000000000000000000000000000000000000000000000002",
          "LastUpdated": "1970-01-01T00:00:55Z",
          "PartofSummaryHash": true,
          "MeasurementType": "FirmwareConfiguration"
        }
      ]
    }
  },
  "Status": {
    "State": "Enabled",
    "Health": "OK"
  },
  "Actions": {
    "#ComponentIntegrity.SPDMGetSignedMeasurements": {
      "target": "/redfish/v1/ComponentIntegrity/SPDM_0_1/Actions/ComponentIntegrity.SPDMGetSignedMeasurements",
      "@Redfish.ActionInfo": "/redfish/v1/ComponentIntegrity/SPDM_0_1/SPDMGetSignedMeasurementsActionInfo"
    }
  }
}

响应码:200

POST (ACTION)

SPDMGetSignedMeasurements

命令功能

基于SPDM协议获取组件签名测量值

命令格式

URL: https://device_ip/redfish/v1/ComponentIntegrity/component_integrity_id/Actions/ComponentIntegrity.SPDMGetSignedMeasurements

请求头:


X-Auth-Token: 123456789***********************
Content-Type: header_type

请求消息体:

json
{
  "MeasurementIndices": measurement_indices,
  "SlotId": slot_id,
  "Nonce": nonce
}

请求头参数说明

参见 请求头参数说明

请求体参数说明

参数参数说明取值
component_integrity_id指定完整性报告的ID可通过完整性报告集合资源获得
measurement_indices请求测量块的数组非必需参数,可选填如下几个使用方式:
1、[1~254] 中的一个或多个唯一值
2、[255]
3、无此参数,默认使用[255]
slot_id签名使用的证书槽位ID非必需参数,可选填如下几个使用方式:
1、0~7:指定使用特定槽位标识符的证书
2、无此参数,默认使用 0
nonce挑战随机数非必需参数,可选填如下几个使用方式:
1、有此参数时,需要遵循规则:
2、无此参数时,自行生成随机数,需要遵循规则:

使用指南

BMC300 5.12.0.1及以上版本支持

使用实例

请求样例:

http
POST https://device_ip/redfish/v1/ComponentIntegrity/component_integrity_id/Actions/ComponentIntegrity.SPDMGetSignedMeasurements

请求头:


X-Auth-Token: 123456789***********************
Content-Type: application/json

请求消息体:

json
{
  "MeasurementIndices": [
    1,
    2,
    3
  ],
  "SlotId": 0,
  "Nonce": "000102030405060708090A0B0C0D0E0F101112131415161718191a1b1c1d1e1f"
}

响应样例:

json
{
  "error": {
    "code": "Base.1.0.GeneralError",
    "message": "A general error has occurred. See ExtendedInfo for more information.",
    "@Message.ExtendedInfo": [
      {
        "Certificate": {
          "@odata.id": "/redfish/v1/Chassis/1/TrustedComponents/SPDM_0/Certificates/1"
        },
        "Version": "1.0",
        "HashingAlgorithm": "TPM_ALG_SHA_256",
        "SigningAlgorithm": "TPM_ALG_RSAPSS_2048",
        "SignedMeasurements": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEB",
        "@odata.type": "#Message.v1_0_0.Message",
        "MessageId": "Base.1.0.Success",
        "RelatedProperties": [],
        "Message": "Successfully Completed Request",
        "MessageArgs": [],
        "Severity": "OK",
        "Resolution": "None"
      }
    ]
  }
}

响应码:200