Set Policy for Acceptance Tests

nsacyber · Jan 11, 2024 · 660b3ad · 660b3ad
1 parent e58fc57
commit 660b3ad
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 0 deletions.
diff --git a/.ci/setup/certs/oem_certs.zip b/.ci/setup/certs/oem_certs.zip
diff --git a/scripts/install_hat.ps1 b/scripts/install_hat.ps1
@@ -99,6 +99,15 @@ foreach-Object {
     curl.exe -k -F "file=@$filename" `
     "https://127.0.0.1:8443/HIRS_AttestationCAPortal/portal/certificate-request/trust-chain/upload"
 }
+# Set ACA Policy to perform EK and Platform Cert validation
+$Properties=docker exec aca powershell -command "Get-Content C:\ProgramData\hirs\aca\aca.properties"
+$Props=echo $Properties | Out-String | ConvertFrom-StringData
+$Prop=$Props.hirs_db_password
+docker exec aca mysql -u hirs_db -D hirs_db --password=$Prop -e `
+"Update policysettings set ecValidationEnabled=1, pcValidationEnabled=1, `
+pcAttributeValidationEnabled=1, utcValidationEnabled=0, firmwareValidationEnabled=0, `
+ expiredCertificateValidationEnabled=0, ignoreGptEnabled=1, `
+ignoreImaEnabled=0, ignoretBootEnabled=0, ignoreOsEvtEnabled=1;"
 
 # Done
 Write-Host "HIRS Acceptance Test Installation complete."