Viewing the X.509 Certificate

Users can view Platform Certificate on the Certificates Table in a Nodegrid application. Two certificates related to the platform certificate solution are displayed:

• Platform Certificate (TPM Attestation Certificate): This certificate is created and signed by the ZPE manufacturing facility and installed in the TPM. It includes information about the EK (Endorsement Key) certificate, manufacturer name, manufacturer ID, device model, device version, device serial number, and attestation key name.

• TPM-EK Certificate (TPM Endorsement Certificate): This certificate is installed and signed by the TPM hardware vendor.

The following images display these certificates in the Certificates table within the Nodegrid Web UI.

The common name for a Platform Certificate is the serial number of the device.

The following commands shows an example of Platform Certificate in the Certificate table and its details:

Certificate Table:

[admin@nodegrid /]# cd /settings/certificates
[admin@nodegrid certificates]# show
  name                  common name   status  type                                      issuer                                      issued on                 expires on                used by
  ====================  ============  ======  ========================================  ==========================================  ========================  ========================  =========
  nodegrid-default      e41a2c00752c  Valid   Signed Certificate                        ZPE Systems Inc e41a2c00752c                Sep 13 00:37:45 2024 GMT  Dec 17 00:37:45 2026 GMT  Webserver
  Platform-Certificate  404803920     Valid   Signed Certificate (TPM)                  ZPE Systems ZPE Systems Manufacturing CA 1  Sep 13 11:09:04 2024 GMT  Sep  8 11:09:03 2044 GMT  Nodegrid

Platform Certificate Details:

[admin@nodegrid certificates]# cd Platform-Certificate/
[admin@ACME Platform-Certificate]# show
certificate name: Platform-Certificate
status: Valid
common name: 404803920
Model: NSR-TOP1-DAC
certificate issuer: ZPE Systems ZPE Systems Manufacturing CA 1
issued on: Sep 13 11:09:04 2024 GMT
expires on: Sep  8 11:09:03 2044 GMT
organization: ZPE Systems
organization unit: Nodegrid
key size: 2048 bit
certificate:
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----