Method checkBoot

kms/auth-simple/index.ts:89–118

(bootInfo: BootInfo, isKms: boolean)

  }

  async checkBoot(bootInfo: BootInfo, isKms: boolean): Promise<BootResponse> {
    const config = this.loadConfig();
    const osImageHash = normalizeHex(bootInfo.osImageHash);
    const deviceId = normalizeHex(bootInfo.deviceId);

    // check TCB status
    if (bootInfo.tcbStatus !== 'UpToDate') {
      return {
        isAllowed: false,
        reason: 'TCB status is not up to date',
        gatewayAppId: config.gatewayAppId
      };
    }

    // check OS image
    const allowedOsImages = config.osImages.map(normalizeHex);
    if (!allowedOsImages.includes(osImageHash)) {
      return {
        isAllowed: false,
        reason: 'OS image is not allowed',
        gatewayAppId: config.gatewayAppId
      };
    }

    if (isKms) {
      return this.checkKmsBoot(bootInfo, config, deviceId);
    } else {
      return this.checkAppBoot(bootInfo, config, deviceId);
    }
  }

  private checkKmsBoot(bootInfo: BootInfo, config: AuthConfig, deviceId: string): BootResponse {
    const mrAggregated = normalizeHex(bootInfo.mrAggregated);