Secure Boot Attestation Request

Request Secure Boot Attestation Host Response Word

This endpoint generates the Host Response Word (HRW) for a Secure Boot attestation sequence. The client provides the Host Challenge Word (HCW) along with the device chain. The service processes the request and returns a transaction ID, which can be used to track or verify the resulting HRW.

Method & Endpoint

Method: POST

Endpoint: /api/device/requestSecureBootAttestationHRW

Headers: CF-Access-Client-ID and CF-Access-Client-Secret

Request Body

{
  "requestSignedResponse": false,
  "HCW": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
  "chain": [
    {
      "sequence": 1,
      "TID": "800000001000000010000000000000014464b592da61f3fd5506fcb1f37f4bef",
      "data": "ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"
    },
    {
      "sequence": 2,
      "TID": "800000001000000010000000000000014464b592da61f3fd5506fcb1f37f4bef",
      "data": "ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"
    },
    {
      "sequence": 3,
      "TID": "800000001000000010000000000000014464b592da61f3fd5506fcb1f37f4bef",
      "data": "ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"
    }
  ]
}

✅ Successful Response — 201 Created

{
  "transactionId": "123e4567-e89b-12d3-a456-426614174000"
}

❌ Error Responses

401 Unauthorized — Invalid authentication

{
  "statusCode": 401,
  "message": "Unauthorized"
}

403 Forbidden — Authorization Forbidden

{
  "statusCode": 403,
  "message": "Invalid request",
  "error": "Forbidden"
}

Check Request Secure Boot Attestation Host Response Word Status

This endpoint allows the client to check the status of a previously requested Host Response Word (HRW) for Secure Boot attestation. By providing the transaction ID in the headers, the client can determine whether the HRW is still processing, not ready, failed, or successfully generated. When available, the HRW is included in the response.

Method & Endpoint

Method: GET

Endpoint: /api/device/checkRequestSecureBootAttestationHRWStatus

Headers: transactionId , CF-Access-Client-Id and CF-Access-Client-Secret

✅ Successful Response — 201 Created

{
  "status": {
    "PROCESSING": "PROCESSING",
    "NOT_READY": "NOT_READY",
    "AUTH_NOT_OK": "AUTH_NOT_OK",
    "GENERATED_HRW": "GENERATED_HRW"
  },
  "HRW": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
}

❌ Error Responses

401 Unauthorized — Invalid authentication

{
  "statusCode": 401,
  "message": "Unauthorized"
}

403 Forbidden — Authorization Forbidden

{
  "statusCode": 403,
  "message": "Invalid request",
  "error": "Forbidden"
}