Missing Nonce in attestation certificate

Question

Created Jul ’22

Replies 2

Boosts 0

Views 1.2k

Participants 2

Hi, I'm implementing support for device attestation support on step-ca, and the attestation certificate, the leaf one in the x5c payload, doesn't include the nonce extension with the challenge token or the SHA256 version of it as it explains in https://developer.apple.com/videos/play/wwdc2022/10143/

Is this implemented? Can it be a device-related problem, meaning that older models do not support this?

Boost

Answer 1

maraino OP

Jul ’22

I'm referring here to the ACMECertificiate flow.

0

Answer 2

Device Management Engineer OP

Apple

Jul ’22

This is a bug in the ACME client in iOS, iPadOS and tvOS that causes the nonce to not appear in the attestation leaf certificate. This issue should be fixed in a future release.

1