diff --git a/systems/x86_64-linux/sgx/default.nix b/systems/x86_64-linux/sgx/default.nix index deb3edb..8acf969 100644 --- a/systems/x86_64-linux/sgx/default.nix +++ b/systems/x86_64-linux/sgx/default.nix @@ -16,8 +16,6 @@ nix-ld.enable = true; nix.enable = true; aesmd_dcap.enable = true; - pccs.enable = true; - pccs.secret = config.sops.secrets.pccs.path; podman.enable = true; secureboot.enable = true; user.extraGroups = [ "docker" "sgx" ]; @@ -40,9 +38,8 @@ environment.etc."sgx_default_qcnl.conf".text = '' { - "pccs_url": "https://127.0.0.1:8081/sgx/certification/v4/", - "use_secure_cert": false, - "collateral_service": "https://api.trustedservices.intel.com/sgx/certification/v4/", + "pccs_url": "https://api.trustedservices.intel.com/sgx/certification/v4/", + "use_secure_cert": true, "retry_times": 6, "retry_delay": 10, "pck_cache_expire_hours": 168,