[Bug]: Missing VBIOS RIM prevents PPCIe attestation on an 8-GPU HGX H800 system
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 323
- Forks
- 61
- PR merge metrics
- No merged PRs in 30d
Description
Note: The Python Attestation SDK, Local GPU Verifier, and PPCIE Verifier 1.x are deprecated.
Please use the C++ SDK and CLI instead.
If your issue relates to deprecated components, we may not be able to address it.
Component
PPCIE Verifier 1.x (deprecated) / NVIDIA production RIM service
Although the original verifier error was produced by PPCIE Verifier 1.x, the
missing RIM is independently reproducible with an authenticated HTTP GET
request to the production RIM service.
Describe the bug
I am deploying NVIDIA Protected PCIe (PPCIe) confidential computing on an
8-GPU HGX H800 system. All 8 GPUs and 4 NVSwitches are passed through to an
Intel TDX confidential VM.
GPU and NVSwitch evidence collection succeeds, but the official PPCIe
verification flow cannot complete because the production RIM service does not
contain the exact VBIOS RIM requested by the verifier:
NV_GPU_VBIOS_G520_0205_865_9600DA000E
The verifier reports: NVAT 104: RIM Not Found.
An authenticated HTTP GET request to the production RIM service also returns:
HTTP 404
{"message":"RIM_NOT_FOUND", ...}
To Reproduce
-
Deploy an 8-GPU HGX H800 system in PPCIe confidential-computing mode.
-
Pass all 8 GPUs and 4 NVSwitches through to an Intel TDX CVM.
-
Collect nonce-bound GPU and NVSwitch evidence.
-
Run the official PPCIe verification flow.
-
The verifier derives the following VBIOS RIM ID: NV_GPU_VBIOS_G520_0205_865_9600DA000E. The verifier fails with NVAT 104: RIM Not Found.
Expected behavior
If this HGX H800 platform and VBIOS build are supported for production PPCIe
attestation, the exact NVIDIA-signed VBIOS RIM should be available from the
production RIM service, allowing the verifier to compare runtime measurements
against the reference measurements.
If this exact platform or VBIOS build is not supported, the documentation or
verifier should identify the supported H800 firmware and software combination
instead of reporting only that the RIM is missing.
Environment (please provide the following information):
This bug is not environment-relevant.
Relevant log output
Please paste relevant error and log output here.
Additional context
Add any other context about the problem here.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the PPCIE Verifier 1.x flow and reproduce the authenticated GET for NV_GPU_VBIOS_G520_0205_865_9600DA000E against the production RIM service. Compare the result with the documented supported H800 firmware and software combinations. Done means the supported combination is identified and the missing-RIM outcome is either resolved or clearly documented.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- api, security
- Issue type
- Bug
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Quiet
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100