Back to Details

azure-attestation

Compare original and translation side by side

🇺🇸

Original

English
🇨🇳

Translation

Chinese

Azure Attestation Skill

Azure Attestation技能

This skill provides expert guidance for Azure Attestation. Covers troubleshooting, best practices, security, configuration, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.
本技能为Azure Attestation提供专业指导，涵盖故障排查、最佳实践、安全防护、配置和部署等内容。它结合了本地快速参考内容与远程文档获取能力。

How to Use This Skill

如何使用本技能

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., 
L35-L120
), use 
read_file
with the specified lines. For categories with file links (e.g., 
[security.md](security.md)
), use 
read_file
on the linked reference file
IMPORTANT for Agent: If 
metadata.generated_at
is more than 3 months old, suggest the user pull the latest version from the repository. If 
mcp_microsoftdocs
tools are not available, suggest the user install it: Installation Guide
This skill requires network access to fetch documentation content:
  • Preferred: Use 
    mcp_microsoftdocs:microsoft_docs_fetch
    with query string 
    from=learn-agent-skill
    . Returns Markdown.
  • Fallback: Use 
    fetch_webpage
    with query string 
    from=learn-agent-skill&accept=text/markdown
    . Returns Markdown.
Agent 注意事项：使用下方的分类索引查找相关章节。对于带有行范围的分类（例如 
L35-L120
），请使用
read_file
工具读取指定行内容。对于带有文件链接的分类（例如 
[security.md](security.md)
），请使用
read_file
工具读取链接的参考文件
Agent 注意事项：如果
metadata.generated_at
的时间超过3个月，请建议用户从代码仓库拉取最新版本。如果
mcp_microsoftdocs
工具不可用，请建议用户安装该工具：安装指南
本技能需要网络访问权限来获取文档内容：
  • 首选方式：使用
    mcp_microsoftdocs:microsoft_docs_fetch
    工具，并添加查询字符串
    from=learn-agent-skill
    ，返回Markdown格式内容。
  • 备用方式：使用
    fetch_webpage
    工具，并添加查询字符串
    from=learn-agent-skill&accept=text/markdown
    ，返回Markdown格式内容。

Category Index

分类索引

CategoryLinesDescription
TroubleshootingL33-L37Diagnosing and resolving common Azure Attestation failures, including policy/quote validation errors, configuration issues, and troubleshooting attestation responses and tokens.
Best PracticesL38-L46Guidance on validating attestation tokens, writing secure attestation policies, and configuring/enforcing SGX and TPM attestation baselines using sample policies.
SecurityL47-L52Using Azure Policy to govern attestation providers, and securing Azure Attestation with private endpoints, firewalls, managed identities, and access control settings
ConfigurationL53-L69Configuring Azure Attestation policies (grammar, versions, claim rules), policy signer certs, and monitoring/logging via Azure Monitor, CLI, PowerShell, and log schema.
DeploymentL70-L73How to create and configure a private endpoint for Azure Attestation using PowerShell, including network setup and secure access to attestation resources.
分类行范围描述
TroubleshootingL33-L37诊断并解决Azure Attestation常见故障，包括策略/引用验证错误、配置问题，以及证明响应和令牌的故障排查。
Best PracticesL38-L46提供验证证明令牌、编写安全证明策略，以及使用示例策略配置/实施SGX和TPM证明基线的指导。
SecurityL47-L52使用Azure Policy管理证明提供者，通过专用端点、防火墙、托管标识和访问控制设置保护Azure Attestation的安全。
ConfigurationL53-L69配置Azure Attestation策略（语法、版本、声明规则）、策略签名者证书，以及通过Azure Monitor、CLI、PowerShell和日志架构进行监控与日志记录。
DeploymentL70-L73如何使用PowerShell为Azure Attestation创建和配置专用端点，包括网络设置和证明资源的安全访问。

Troubleshooting

故障排查

TopicURL
Troubleshoot common Azure Attestation errors and issueshttps://learn.microsoft.com/en-us/azure/attestation/troubleshoot-guide
主题链接
排查Azure Attestation常见错误和问题https://learn.microsoft.com/en-us/azure/attestation/troubleshoot-guide

Best Practices

最佳实践

TopicURL
Interpret and validate Azure Attestation tokens with exampleshttps://learn.microsoft.com/en-us/azure/attestation/attestation-token-examples
Author secure and correct Azure Attestation policieshttps://learn.microsoft.com/en-us/azure/attestation/author-sign-policy
Configure custom TCB baseline enforcement for SGX attestationhttps://learn.microsoft.com/en-us/azure/attestation/custom-tcb-baseline-enforcement
Use sample SGX attestation policies in Azurehttps://learn.microsoft.com/en-us/azure/attestation/policy-examples
Use sample TPM attestation policies in Azurehttps://learn.microsoft.com/en-us/azure/attestation/tpm-attestation-sample-policies
主题链接
示例解析与验证Azure Attestation令牌https://learn.microsoft.com/en-us/azure/attestation/attestation-token-examples
编写安全合规的Azure Attestation策略https://learn.microsoft.com/en-us/azure/attestation/author-sign-policy
为SGX证明配置自定义TCB基线实施https://learn.microsoft.com/en-us/azure/attestation/custom-tcb-baseline-enforcement
在Azure中使用SGX证明示例策略https://learn.microsoft.com/en-us/azure/attestation/policy-examples
在Azure中使用TPM证明示例策略https://learn.microsoft.com/en-us/azure/attestation/tpm-attestation-sample-policies

Security

安全防护

TopicURL
Apply built-in Azure Policy definitions for Attestationhttps://learn.microsoft.com/en-us/azure/attestation/policy-reference
Secure Azure Attestation with network and identity controlshttps://learn.microsoft.com/en-us/azure/attestation/secure-attestation
主题链接
应用Attestation内置Azure Policy定义https://learn.microsoft.com/en-us/azure/attestation/policy-reference
通过网络和身份控制保护Azure Attestation安全https://learn.microsoft.com/en-us/azure/attestation/secure-attestation

Configuration

配置

TopicURL
Use Azure Attestation claim rule functions and operatorshttps://learn.microsoft.com/en-us/azure/attestation/claim-rule-functions
Use Azure Attestation claim rule grammar in policieshttps://learn.microsoft.com/en-us/azure/attestation/claim-rule-grammar
Understand Azure Attestation claim sets and categorieshttps://learn.microsoft.com/en-us/azure/attestation/claim-sets
Enable diagnostic logging for Azure Attestationhttps://learn.microsoft.com/en-us/azure/attestation/enable-logging
Reference for Azure Attestation monitoring and log schemahttps://learn.microsoft.com/en-us/azure/attestation/logs-data-reference
Monitor Azure Attestation with Azure Monitorhttps://learn.microsoft.com/en-us/azure/attestation/monitor-logs
Configure Azure Attestation policy signer certificateshttps://learn.microsoft.com/en-us/azure/attestation/policy-signer-examples
Configure Azure Attestation policy language version 1.0https://learn.microsoft.com/en-us/azure/attestation/policy-version-1-0
Configure Azure Attestation policy language version 1.1https://learn.microsoft.com/en-us/azure/attestation/policy-version-1-1
Configure Azure Attestation policy language version 1.2https://learn.microsoft.com/en-us/azure/attestation/policy-version-1-2
Set up Azure Attestation using Azure CLIhttps://learn.microsoft.com/en-us/azure/attestation/quickstart-azure-cli
Configure Azure Attestation provider with PowerShellhttps://learn.microsoft.com/en-us/azure/attestation/quickstart-powershell
Understand and use Azure Attestation log datahttps://learn.microsoft.com/en-us/azure/attestation/view-logs
主题链接
使用Azure Attestation声明规则函数和运算符https://learn.microsoft.com/en-us/azure/attestation/claim-rule-functions
在策略中使用Azure Attestation声明规则语法https://learn.microsoft.com/en-us/azure/attestation/claim-rule-grammar
了解Azure Attestation声明集和分类https://learn.microsoft.com/en-us/azure/attestation/claim-sets
启用Azure Attestation诊断日志https://learn.microsoft.com/en-us/azure/attestation/enable-logging
Azure Attestation监控与日志架构参考https://learn.microsoft.com/en-us/azure/attestation/logs-data-reference
使用Azure Monitor监控Azure Attestationhttps://learn.microsoft.com/en-us/azure/attestation/monitor-logs
配置Azure Attestation策略签名者证书https://learn.microsoft.com/en-us/azure/attestation/policy-signer-examples
配置Azure Attestation策略语言版本1.0https://learn.microsoft.com/en-us/azure/attestation/policy-version-1-0
配置Azure Attestation策略语言版本1.1https://learn.microsoft.com/en-us/azure/attestation/policy-version-1-1
配置Azure Attestation策略语言版本1.2https://learn.microsoft.com/en-us/azure/attestation/policy-version-1-2
使用Azure CLI设置Azure Attestationhttps://learn.microsoft.com/en-us/azure/attestation/quickstart-azure-cli
使用PowerShell配置Azure Attestation提供者https://learn.microsoft.com/en-us/azure/attestation/quickstart-powershell
了解并使用Azure Attestation日志数据https://learn.microsoft.com/en-us/azure/attestation/view-logs

Deployment

部署

TopicURL
Create Azure Attestation private endpoint with PowerShellhttps://learn.microsoft.com/en-us/azure/attestation/private-endpoint-powershell
主题链接
使用PowerShell创建Azure Attestation专用端点https://learn.microsoft.com/en-us/azure/attestation/private-endpoint-powershell