Verify Google Cloud signed images
Suggest changes
PDFs
To verify the exported Google Cloud signed image, you must download the image digest file from the NSS to validate the disk.raw file and digest file contents.
Signed image verification workflow summary
The following is an overview of the Google Cloud signed image verification workflow process.
-
From the NSS, download the Google Cloud archive containing the following files:
-
Signed digest (.sig)
-
Certificate containing the public key (.pem)
-
Certificate chain (.pem)
-
-
Download the converted disk.raw file
-
Validate the certificate using the certificate chain
-
Validate the signed digest using the certificate contain the public key
-
Decrypt the signed digest using the public key to extract the digest of the image file
-
Create a digest of the downloaded disk.raw file
-
Compare the two digest file for validation
-