DET-G2: A different GPU is behind the deployment¶
The attested device identity (ueid, else UUID) differs from the previous capture: the host attached another GPU to the confidential VM.
| Property | Value |
|---|---|
| Severity | high |
| Platform | NVIDIA GPU CC |
| Group | tee |
| Log source | GPU evidence capture |
| Related check | GPUCC-BIND-01: The GPU attestation is cryptographically bound to the CVM |
Fires when¶
attesting GPU uuid/identity != the expected GPU behind the deployment
How it runs¶
untrust detect --platform gpu-cc compares successive GPU evidence captures, each passed with --capture.
A match is a detection event with this rule's ID. Upload it to the console to alert on it; see Runtime detections.