initial tpm broker

2026-06-28 10:33:14 +00:00
parent 3bcf16e384
commit 9e1dbd3ef7
17 changed files with 1584 additions and 19 deletions
@@ -63,6 +63,11 @@ serving/kiosk-app/                         Svelte+Tailwind spaceship-terminal SP
                                          OS-side kiosk runtime stays in files/kiosk/
 serving/dot1x-bench/                      Secure-path bench: step-ca + FreeRADIUS +
                                          hostapd authenticator + TPM enrolment
+                                          (+ enrol-broker service)
+serving/enrol-broker/                     TPM identity enrolment broker (Go): the one
+                                          unauth pre-auth endpoint (POST CSR -> OOB
+                                          fingerprint -> admin mTLS approve -> step-ca
+                                          sign). docs/tpm-enrolment-design.md
 serving/siem/                             Wazuh SIEM overlay (audit analysis;
                                          agentless relay from audit-collector)
 .gitea/workflows/                         Gitea CI: lint -> packer build -> push OCI