esx attestation tpm2 ca certificates: create spec

The create_spec structure contains information that describes a TPM CA certificate.

Representation:

{
    "name""obj-103",
    "cert_chain"{
        "certs"[
            "string",
            "string"
        ]
    }
}

Attributes:

Name Type Description
Required
name string A unique name for the TPM CA certificate.

When clients pass a value of this structure as a parameter, the field must be an identifier for the resource type: com.vmware.esx.attestation.tpm2.ca_certificates. When operations return a value of this structure as a result, the field will be an identifier for the resource type: com.vmware.esx.attestation.tpm2.ca_certificates.

cert_chain.certs string[] A list of certificates each in PEM format.

Certificates must be ordered from the root first.

Optional
cert_chain x509_cert_chain The CA certificate chain.

Certificates may either be added one at a time, or as a chain. Adding the certificates as a chain allows the group to be managed as a whole. For example, an entire chain can be deleted in one delete operation.

When certificates are added one at a time, the order must be root first, followed by any intermediates. The intermediates certificates must also be ordered in the direction from root to leaf.

Similarly, when added as a chain the list must be ordered in the direction from root to leaf.

Optional. If unset creation will fail.