Onchain PCCS

A Provisioning Certification Caching Service (PCCS) distributes the certificates, revocation data, and platform information used to verify Intel DCAP quotes. An Onchain PCCS stores that attestation collateral in smart contracts.

Putting collateral onchain gives smart-contract verifiers a shared and auditable source of data. It also avoids requiring every application to operate a separate offchain cache.

What it does not replace

An Onchain PCCS supplies and organizes collateral; the TEE verifier still checks the quote, validates the collateral, and applies policy. Collateral also needs continuous upkeep as certificates expire, revocation lists change, and new TCB information is published.

Automata's open-source Onchain PCCS is integrated with its DCAP Attestation contracts.