deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-28 13:17:23 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Add backticks to apparent code blocks; label some

Browse Source
This commit is contained in:
Gary Moore 2021-10-19 12:24:14 -07:00
parent 8af64f7c30
commit 8f62eeb9d2
1 changed files with 98 additions and 83 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
windows/client-management/mdm/healthattestation-csp.md
View File

@ -103,6 +103,7 @@ This node will trigger attestation flow by launching an attestation process. If
<p>Templated SyncML Call:</p>
```xml
<SyncML xmlns="SYNCML:SYNCML1.2">
<SyncBody>
<Exec>
@ -124,6 +125,7 @@ This node will trigger attestation flow by launching an attestation process. If
<Final/>
</SyncBody>
</SyncML>
```
<p>Data fields:</p>
<ul>
@ -136,6 +138,7 @@ This node will trigger attestation flow by launching an attestation process. If
<p>Sample Data:</p>
```json
<Data>
{
"rpid" : "https://www.contoso.com/attestation",
@ -145,6 +148,7 @@ This node will trigger attestation flow by launching an attestation process. If
"cv" : "testonboarded"
}
</Data>
```
<a href="" id="AttestStatus"></a>**AttestStatus**
<p>Node type: GET
@ -154,6 +158,7 @@ The status is always cleared prior to making the attest service call.
<p>Templated SyncML Call:</p>
```xml
<SyncML xmlns="SYNCML:SYNCML1.2">
<SyncBody>
<Get>
@ -168,12 +173,15 @@ The status is always cleared prior to making the attest service call.
<Final/>
</SyncBody>
</SyncML>
```
<p>Sample Data:</p>
```
If Successful: 0
If Failed: A corresponding HRESULT error code
Example: 0x80072efd, WININET_E_CANNOT_CONNECT
```
<a href="" id="getAttestReport"></a>**GetAttestReport**
<p>Node type: GET
@ -182,6 +190,7 @@ This node will retrieve the attestation report per the call made by the TriggerA
<p>Templated SyncML Call:</p>
```xml
<SyncML xmlns="SYNCML:SYNCML1.2">
<SyncBody>
<Get>
@ -196,14 +205,17 @@ This node will retrieve the attestation report per the call made by the TriggerA
<Final/>
</SyncBody>
</SyncML>
```
<p>Sample data:</p>
```
If Success:
JWT token: aaaaaaaaaaaaa.bbbbbbbbbbbbb.cccccccccc
If failed:
Previously cached report if available (the token may have already expired per the attestation policy).
OR Sync ML 404 error if not cached report available.
```
<a href="" id="getServiceCorrelationIDs"></a>**GetServiceCorrelationIDs**
<p>Node type: GET
@ -211,6 +223,7 @@ This node will retrieve the service generated correlation IDs for the given MDM
</p>
<p>Templated SyncML Call:</p>
```xml
<SyncML xmlns="SYNCML:SYNCML1.2">
<SyncBody>
<Get>
@ -225,6 +238,7 @@ This node will retrieve the service generated correlation IDs for the given MDM
<Final/>
</SyncBody>
</SyncML>
```
<p>Sample data:</p>
@ -380,6 +394,7 @@ c:[type=="events", issuer=="AttestationService"] => issue(type="bootRevListInfo"
};
```
</li>
<br><li>Call TriggerAttestation with your rpid, AAD token and the attestURI:<br>
Use the Attestation URL generated in step 1, and append the appropriate api version you want to hit. More information about the api version can be found here Attestation - Attest Tpm - REST API (Azure Azure Attestation) | Microsoft Docs</li>
@ -387,7 +402,7 @@ Use the Attestation URL generated in step 1, and append the appropriate api vers
GetAttestReport return the signed attestation token as a JWT.The JWT can be decoded to parse the information per the attestation policy.
<br>
```json
{
"typ": "JWT",
"alg": "RS256",
@ -442,7 +457,7 @@ GetAttestReport return the signed attestation token as a JWT.The JWT can be deco
"testSigningDisabled": true,
"vbsEnabled": true
}.[Signature]
```
</li>
</ol>