Automata

DCAP

Data Center Attestation Primitives (DCAP) is Intel's attestation model for Intel SGX and Intel TDX. It lets organizations verify attestation quotes using published certificates and platform data instead of contacting Intel for every verification.

How DCAP verification works

  1. A platform produces an attestation quote.
  2. The verifier obtains the matching attestation collateral.
  3. Cryptographic checks establish the quote's certificate chain and integrity.
  4. The platform's Trusted Computing Base status and workload measurements are evaluated against policy.

Automata's DCAP Attestation contracts perform this verification onchain. The Onchain PCCS supplies shared collateral to those contracts.