Policy management

This article contains sample workflows for managing attestation policies. See the Policies article for additional details on using policies.

Policy Types

There are two types of policies, Appraisal and Token customization. Appraisal policies evaluate the evidence provided and determine whether Intel® Trust Authority issues an attestation token. A Token customization policy allows customized claims that are part of the attestation token.

Each policy type can be signed or unsigned. A signed policy assures the relying party that the signed policy is unchanged. Policies can be managed using the following:

• Intel Trust Authority portal
• TrustAuthority CLI
• REST API

Policies can be managed using the Intel® Trust Authority portal, with the client CLI, or by REST API.

• Intel Trust Authority Portal
• CLI
• REST API

View policies

You can view the list of policies using one of the following methods.

1. Sign in to the Intel Trust Authority portal.

2. Select Manage policies. A list of attestation policies displays in the Policy Library pane.

   

Search by policy name

1. Sign in to the Intel Trust Authority portal.

2. Select Manage policies.

3. In the Search by policy name: box, enter the policy name. The search is incremental. It begins after the first letter is entered.

   The search results are displayed in the Policy Library pane.

Filter by attestation type

1. Sign in to the Intel Trust Authority portal.

2. Select Manage policies.

3. Select the attestation type from the Filter by attestation type: dropdown list.

   The search results are displayed in the Policy Library pane.

Create a policy

These instructions describe how to create a policy using the Intel Trust Authority portal.

Note

For more information on creating a policy see the Author a custom policy article.

1. Sign in to the Intel Trust Authority portal.

2. Select Manage policies.

3. Select ADD A POLICY.

4. Enter a Policy name.

   

5. Select the attestation type you want from the Choose an attestation type dropdown list.

6. Select a policy type for the selected attestation.

7. Select BROWSE.

   

8. Go to the policy.

9. Select the policy and then select Open.

10. Select SAVE.

    The Manage Policies page displays with the new policy displayed in the Policy Library pane.

Edit a policy

1. Sign in to the Intel Trust Authority portal.

2. Select Manage policies.

3. Select the icon for the policy you want to edit.

4. Select EDIT POLICY.

   

5. You can edit the following:

   • Policy name

     1. In the Policy name box, enter a new name for the policy.

   • Assign a new policy file

     1. Select BROWSE.

     2. Go to the policy file.

     3. Select the policy file and then select Open.

6. After your changes are made, select SAVE.

Delete a policy

1. Sign in to the Intel Trust Authority portal.

2. Select Manage policies.

3. Select the icon for the policy to be deleted.

4. Select DELETE POLICY.

   The policy is deleted.

Sign a policy

See the Policy Signing Tool article for instructions on signing a policy.