Skip to content

Commit dbc5dc9

Browse files
committed
fix
Signed-off-by: Ming-Wei Shih <[email protected]>
1 parent 605d9d7 commit dbc5dc9

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

articles/confidential-computing/guest-attestation-confidential-vms-design.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ This document provides a detailed overview of the [Azure confidential VM Guest A
1616

1717
## vTPM-Based Design
1818

19-
Azure confidential VMs utilize a vTPM-based design for the guest attestation. The approach ensures a consistent interface across guest operating systems (Linux and Windows) and hardware platforms (AMD SEV-SNP and Intel TDX).
19+
Azure confidential virtual machines (VMs) utilize a vTPM-based design for the guest attestation. The approach ensures a consistent interface across guest operating systems (Linux and Windows) and hardware platforms (AMD SEV-SNP and Intel TDX).
2020

2121
## Attestation Flow
2222

@@ -31,7 +31,7 @@ A vTPM evidence consists of a TPM quote and endorsements used to verify the quot
3131
- A standard TPM quote that is the output of `TPM2_Quote` command defined by TPM 2.0 specification.
3232
- Includes a list of Platform Configuration Registers (PCRs) that captures the measurements of the guest OS (for example, boot process).
3333
- The usage of PCRs conforms to Linux and Windows standards (each having its usage definition).
34-
- The quote is signed by vTPM attestation private key (AK); that is, AK is specified as the signing key in the `TPM2_Quote` command.
34+
- Signed by vTPM attestation private key (AK); that is, AK is specified as the signing key in the `TPM2_Quote` command.
3535

3636
- TPM Event Log
3737
- An event log stored in the system that can be used to reproduce PCR values in the TPM quote.
@@ -43,12 +43,12 @@ A vTPM evidence consists of a TPM quote and endorsements used to verify the quot
4343

4444
- Hardware Report
4545
- Generated and signed by the hardware.
46-
- Capturing the following information
46+
- Capture the following information
4747
- AK public
4848
- The measurement of Microsoft-built guest paravisor where the vTPM runs
4949
- Learn more in [Confidential VMs on Azure](https://techcommunity.microsoft.com/t5/windows-os-platform-blog/confidential-vms-on-azure/ba-p/3836282)).
5050
- Hardware information
51-
- Refer to AMD SEV-SNP and Intel TDX specifications for more detail.
51+
- Refer to AMD SEV-SNP and Intel TDX specifications for more detail.
5252

5353
- Hardware Vendor Certificate Chain
5454
- Issued by hardware vendor (AMD and Intel) to certify the signature of the hardware report.

0 commit comments

Comments
 (0)