The PCCS_API_KEY needs to be replaced with your PCCS API Key.
There is no need for a PCCS API Key, just run the following:
docker run -it \
-v $(pwd)/bin/tls:/root/tls \
-p 50051:50051 \
-p 50052:50052 \
--device /dev/sgx/enclave \
--device /dev/sgx/provision \
Get the policy and TLS Certificate
In hardware mode, we are required to pass two files that were generated previously by the server to the client: policy.toml and host_server.pem. Read more about what these files are used for here: Certificate and policy
You may pull the policy for the latest prebuilt server binary with this command:
docker run --rm mithrilsecuritysas/blindai-server:latest cat /root/policy.toml > policy.toml
If you wish to use the default built-in TLS certificate, you need to pull the certificate first as well.
docker run --rm mithrilsecuritysas/blindai-server:latest cat /root/tls/host_server.pem > host_server.pem