diff --git i/keylime-agent.conf w/keylime-agent.conf index 49124f3..5dd707b 100644 --- i/keylime-agent.conf +++ w/keylime-agent.conf @@ -33,14 +33,16 @@ api_versions = "default" # of 'SHA256(public EK in PEM format)'. # # To override, set KEYLIME_AGENT_UUID environment variable. -uuid = "d432fbb3-d2f1-4a97-9ef7-75bd81c00000" +# uuid = "d432fbb3-d2f1-4a97-9ef7-75bd81c00000" +uuid = "generate" # The binding IP address or hostname (FQDN) and port for the agent server # Supports IPv4, IPv6, or fully qualified domain names # # To override ip, set KEYLIME_AGENT_IP environment variable. # To override port, set KEYLIME_AGENT_PORT environment variable. -ip = "127.0.0.1" +# ip = "127.0.0.1" +ip = "0.0.0.0" port = 9002 # Address (IP or hostname/FQDN) and port where the verifier and tenant can connect to reach the agent. @@ -58,7 +60,8 @@ contact_port = 9002 # To override registrar_ip, set KEYLIME_AGENT_REGISTRAR_IP environment variable. # To override registrar_port, set KEYLIME_AGENT_REGISTRAR_PORT environment # variable. -registrar_ip = "127.0.0.1" +# registrar_ip = "127.0.0.1" +registrar_ip = "" registrar_port = 8890 # Enable mTLS communication between agent, verifier and tenant. @@ -191,7 +194,8 @@ revocation_actions_dir = "/usr/libexec/keylime" # KEYLIME_AGENT_REVOCATION_NOTIFICATION_IP environment variable. # To override revocation_notification_port, set # KEYLIME_AGENT_REVOCATION_NOTIFICATION_PORT environment variable. -revocation_notification_ip = "127.0.0.1" +# revocation_notification_ip = "127.0.0.1" +revocation_notification_ip = "" revocation_notification_port = 8992 # The path to the certificate to verify revocation messages received from the