---
title: "Verify Boot Attestation"
method: POST
path: "/servers/boot/attestation"
tags: ["Servers"]
---

# Verify Boot Attestation

`POST /servers/boot/attestation`

Verify boot attestation and return LUKS passphrase.

This endpoint verifies the TDX quote against expected boot measurements
and returns the LUKS passphrase for disk decryption if valid.
For VMs running version >= 1.3.0, also returns a luks_quote_nonce for
the subsequent POST /luks/attest call.

## Headers

- `X-Chutes-Nonce` string, nullable

## Request body

- BootAttestationArgs — Request model for boot attestation.
  - `quote` string, required — Base64 encoded TDX quote
  - `miner_hotkey` string, required — Miner hotkey that owns this VM
  - `vm_name` string, required — VM name/identifier
  - `first_boot` boolean — True when the VM detected a fresh (re-downloaded) image via its LUKS2 header token

## Response `200`

Successful Response

- BootAttestationResponse — Response model for successful boot attestation.
  - `key` string, required
  - `luks_quote_nonce` string, nullable
  - `root_next` string, nullable — New root passphrase the VM should rotate to (None for pre-1.4.0 VMs)
  - `root_confirm_nonce` string, nullable — Single-use nonce for confirming root passphrase rotation via POST /luks/confirm
  - `vm_auth_ss58` string, nullable

## Other responses

- `422` — Validation Error

---

[API](https://skmtc.net/chutes/apis/fastapi.md) · [All operations](https://skmtc.net/chutes/apis/fastapi/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/chutes/fastapi/revisions/352418d4e3a2/schema)