<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
<div style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Hi Gary,</div>
<div style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Welcome to OpenBMC!</div>
<div style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
The previous bmcweb patches you referenced have been in review for quite a long time now (a couple of years) and haven’t seen any recent activity. Based on that, it doesn’t look like there’s active interest or ongoing work in that area at the moment.</div>
<p style="text-align: left; text-indent: 0px;"><span style="font-size: 16px;">Given that, it would make sense for you to go ahead and contribute your bmcweb implementation either as a fresh
</span>patch or revive the old one (it's your call)<span style="font-size: 16px;">. It sounds like your work nicely complements the spdmd D-Bus backend/PDI and helps complete the overall attestation stack, so it would be a valuable addition upstream.</span></p>
<p style="text-align: left; text-indent: 0px; text-transform: none;"><span style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">Looking forward to seeing your patches on Gerrit and collaborating further.</span></p>
<p style="text-align: left; text-indent: 0px; text-transform: none;"><span style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"><br>
</span></p>
<p style="text-align: left; text-indent: 0px; text-transform: none;"><span style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">Thanks,</span></p>
<p style="text-align: left; text-indent: 0px; text-transform: none;"><span style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">Manoj</span></p>
<div style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="mail-editor-reference-message-container">
<div class="ms-outlook-mobile-reference-message skipProofing" style="direction: ltr;">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
</div>
<div class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; padding: 3pt 0in 0in; border-width: 1pt medium medium; border-style: solid none none; border-color: rgb(181, 196, 223) currentcolor currentcolor; font-family: Aptos; font-size: 12pt; color: black;">
<b>From: </b>Gary Beihl <garybeihl@microsoft.com><br>
<b>Date: </b>Monday, 30 March 2026 at 2:49 AM<br>
<b>To: </b>openbmc@lists.ozlabs.org <openbmc@lists.ozlabs.org><br>
<b>Cc: </b>Thirupathaiah Annapureddy <thiruan@microsoft.com>, Sagar Dharia <Sagar.Dharia@microsoft.com>, Giri Mudusuru <girimudusuru@microsoft.com><br>
<b>Subject: </b>bmcweb ComponentIntegrity routes for SPDM attestation<br>
<br>
</div>
<p class="MsoNormal" style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;">
<span style="font-size: 11pt;">Hello everyone,</span></p>
<p class="MsoNormal" style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;">
<span style="font-size: 11pt;"> </span></p>
<p class="MsoNormal" style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;">
<span style="font-size: 11pt;">I have been looking at SPDM attestation end-to-end testing using Renode and have a working bmcweb implementation of the Redfish ComponentIntegrity routes that consumes the D-Bus interfaces already merged in phosphor-dbus-interfaces
[1]. I noticed that the previous bmcweb WIP for ComponentIntegrity was auto-abandoned [2] and there does not appear to be an active effort to implement these routes upstream.</span></p>
<p class="MsoNormal" style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;">
<span style="font-size: 11pt;"> </span></p>
<p class="MsoNormal" style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;">
<span style="font-size: 11pt;">The routes are designed to complement the spdmd D-Bus backend work currently in review [3][4], providing the Redfish frontend needed to complete the attestation stack described in the design document [5].</span></p>
<p class="MsoNormal" style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;">
<span style="font-size: 11pt;"> </span></p>
<p class="MsoNormal" style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;">
<span style="font-size: 11pt;">I wanted to check whether anyone is already working on bmcweb routes downstream before submitting to Gerrit. If not, I am happy to contribute and collaborate on getting this piece upstream.</span></p>
<p class="MsoNormal" style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;">
<span style="font-size: 11pt;"> </span></p>
<p class="MsoNormal" style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;">
<span style="font-size: 11pt;">References:</span></p>
<p class="MsoNormal" style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;">
<span style="font-size: 11pt;">1. </span><span style="font-size: 11pt; color: rgb(70, 120, 134);"><u><a href="https://github.com/openbmc/phosphor-dbus-interfaces/tree/master/yaml/xyz/openbmc_project/Attestation" data-outlook-id="9e9a58ad-faa8-4210-8fbb-2e68dfeeacc1" style="color: rgb(70, 120, 134); margin-top: 0px; margin-bottom: 0px;">https://github.com/openbmc/phosphor-dbus-interfaces/tree/master/yaml/xyz/openbmc_project/Attestation</a></u></span></p>
<p class="MsoNormal" style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;">
<span style="font-size: 11pt;">2. </span><span style="font-size: 11pt; color: rgb(70, 120, 134);"><u><a href="https://gerrit.openbmc.org/c/openbmc/bmcweb/+/61702" data-outlook-id="675ea8ed-99de-4fdc-af26-6c65876f0f26" style="color: rgb(70, 120, 134); margin-top: 0px; margin-bottom: 0px;">https://gerrit.openbmc.org/c/openbmc/bmcweb/+/61702</a></u></span></p>
<p class="MsoNormal" style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;">
<span style="font-size: 11pt;">3. </span><span style="font-size: 11pt; color: rgb(70, 120, 134);"><u><a href="https://gerrit.openbmc.org/c/openbmc/spdm/+/80272" data-outlook-id="98c790ea-6702-4f78-8ab1-14100e5cac26" style="color: rgb(70, 120, 134); margin-top: 0px; margin-bottom: 0px;">https://gerrit.openbmc.org/c/openbmc/spdm/+/80272</a></u></span></p>
<p class="MsoNormal" style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;">
<span style="font-size: 11pt;">4. </span><span style="font-size: 11pt; color: rgb(70, 120, 134);"><u><a href="https://gerrit.openbmc.org/c/openbmc/spdm/+/80274" data-outlook-id="5c64567d-328d-4ae3-a397-fdfee22893e5" style="color: rgb(70, 120, 134); margin-top: 0px; margin-bottom: 0px;">https://gerrit.openbmc.org/c/openbmc/spdm/+/80274</a></u></span></p>
<p class="MsoNormal" style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;">
<span style="font-size: 11pt;">5. </span><span style="font-size: 11pt; color: rgb(70, 120, 134);"><u><a href="https://github.com/openbmc/docs/blob/master/designs/redfish-spdm-attestation.md" data-outlook-id="6e5cc692-335a-4433-9021-ed2e7ffe295d" style="color: rgb(70, 120, 134); margin-top: 0px; margin-bottom: 0px;">https://github.com/openbmc/docs/blob/master/designs/redfish-spdm-attestation.md</a></u></span></p>
<p class="MsoNormal" style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;">
<span style="font-size: 11pt;"> </span></p>
<p class="MsoNormal" style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;">
<span style="font-size: 11pt;">Looking forward to your thoughts,</span></p>
<p class="MsoNormal" style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;">
<span style="font-size: 11pt;"> </span></p>
<p class="MsoNormal" style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;">
<span style="font-size: 11pt;">Gary Beihl</span></p>
<p class="MsoNormal" style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;">
<span style="font-size: 11pt;">Firmware Engineering</span></p>
<p class="MsoNormal" style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;">
<span style="font-size: 11pt;">Microsoft Corporation</span></p>
<p class="MsoNormal" style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;">
<span style="font-size: 11pt;"> </span></p>
<p class="MsoNormal" style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;">
<span style="font-size: 11pt;"> </span></p>
<p class="MsoNormal" style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;">
<span style="font-size: 11pt;"> </span></p>
<p class="MsoNormal" style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;">
<span style="font-size: 11pt;"> </span></p>
<p class="MsoNormal" style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;">
<span style="font-size: 11pt;"> </span></p>
<p class="MsoNormal" style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;">
<span style="font-size: 11pt;"> </span></p>
<p class="MsoNormal" style="text-align: center; margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;">
<span style="font-size: 11pt;"> </span></p>
<p class="MsoNormal" style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;">
<span style="font-size: 11pt;"> </span></p>
<p class="MsoNormal" style="margin: 0in; font-family: Aptos, sans-serif; font-size: 12pt;">
<span style="font-size: 11pt;"> </span></p>
</div>
</body>
</html>