NVIDIA / NVIDIA/nvtrust

[Bug]: Missing VBIOS RIM prevents PPCIe attestation on an 8-GPU HGX H800 system

Open
#151 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

bug needs-triage
Dominant language
Python
Stars
323
Forks
61
PR merge metrics
No merged PRs in 30d

Description

Note: The Python Attestation SDK, Local GPU Verifier, and PPCIE Verifier 1.x are deprecated.
Please use the C++ SDK and CLI instead.
If your issue relates to deprecated components, we may not be able to address it.

Component
PPCIE Verifier 1.x (deprecated) / NVIDIA production RIM service

Although the original verifier error was produced by PPCIE Verifier 1.x, the
missing RIM is independently reproducible with an authenticated HTTP GET
request to the production RIM service.

Describe the bug
I am deploying NVIDIA Protected PCIe (PPCIe) confidential computing on an
8-GPU HGX H800 system. All 8 GPUs and 4 NVSwitches are passed through to an
Intel TDX confidential VM.

GPU and NVSwitch evidence collection succeeds, but the official PPCIe
verification flow cannot complete because the production RIM service does not
contain the exact VBIOS RIM requested by the verifier:

NV_GPU_VBIOS_G520_0205_865_9600DA000E

The verifier reports: NVAT 104: RIM Not Found.

An authenticated HTTP GET request to the production RIM service also returns:

HTTP 404
{"message":"RIM_NOT_FOUND", ...}

To Reproduce

  1. Deploy an 8-GPU HGX H800 system in PPCIe confidential-computing mode.

  2. Pass all 8 GPUs and 4 NVSwitches through to an Intel TDX CVM.

  3. Collect nonce-bound GPU and NVSwitch evidence.

  4. Run the official PPCIe verification flow.

  5. The verifier derives the following VBIOS RIM ID: NV_GPU_VBIOS_G520_0205_865_9600DA000E. The verifier fails with NVAT 104: RIM Not Found.

Expected behavior
If this HGX H800 platform and VBIOS build are supported for production PPCIe
attestation, the exact NVIDIA-signed VBIOS RIM should be available from the
production RIM service, allowing the verifier to compare runtime measurements
against the reference measurements.
If this exact platform or VBIOS build is not supported, the documentation or
verifier should identify the supported H800 firmware and software combination
instead of reporting only that the RIM is missing.

Environment (please provide the following information):

This bug is not environment-relevant.

Relevant log output
Please paste relevant error and log output here.

Additional context
Add any other context about the problem here.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the PPCIE Verifier 1.x flow and reproduce the authenticated GET for NV_GPU_VBIOS_G520_0205_865_9600DA000E against the production RIM service. Compare the result with the documented supported H800 firmware and software combinations. Done means the supported combination is identified and the missing-RIM outcome is either resolved or clearly documented.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
api, security
Issue type
Bug
Difficulty
5/5
Estimated time
Over a week
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.