SE-MEAS-01: SE image is in the fleet's expected set

Property	Value
Severity	high
Platform	Hardware fleets (collector)
Lifecycle stage	hardware
Policy	P-09: Only signed images pinned to a measurement are launched
Evaluated from	Evidence sent to the service (collector bundles or registry scans), not from a cloud API scan.

What it checks

It passes when:

• The guest booted an SE image whose boot header tags are pinned.

How to fix

• Pin the approved image's boot header tags, or investigate an unapproved SE image.

After the fix, scan again: the check should report PASS.

Related

• Other checks for policy P-09: AZ-MEAS-01, CCA-MEAS-01, CSPACE-BINAUTHZ-01, CSPACE-IMG-01, CSPACE-IMG-02, GPU-RIM-01, REG-PROV-01, REG-SIG-01, REG-SIG-02, SGX-MEAS-01, SNP-MEAS-01, TDX-MEAS-01

Evidence recorded

Keys in the finding's evidence: se_header_tag

Generated from untrust 1.3.0 (commit 7ef462d9a0c3).