Self-test

This operation performs an internal full self-test of the device's critical components, including cryptography primitives, random number generator and key repository integrity.

Allowed users

User

Allowed

Master

Allowed

ExtAuth

Allowed

Required access scope

Main

Any. Only a valid access token is required, the access scope is not been checked.

The Authorization header is not required on fresh, not personalized devices.

Get self-test status

GET https://my.ence.do/api/system/selftest

Get the last self-test status and rerun a new full test (only if not already ongoing).

Headers

Name	Type	Description
Authorization	String	Bearer JWT_TOKEN

200: OK Operation sucessful

{
  "last_selftest_ts": 1647615622,
  "last_fls_state": 0,
  "last_entropytest_ts": 1647615622,
  "last_kat_ts": 1647606250,
  "kat_busy": true,
  "fls_state": 0,
  "selftest_ts": 1647615642,
  "se_state": 0
}

401: Unauthorized Missing or invalid JWT_TOKEN

403: Forbidden Operation failed

409: Conflict Incorrect internal state

Response data for successful operation

Name	Type	Description
fls_state	Number	Fail state number, default 0 as 'no errors'.
kat_busy	Bool	True is KAT is ongoing.
last_entropytest_ts	Number	Last entropy test timestamp.
last_fls_state	Number	Last fls_state.
last_kat_ts	Number	Last KAT timestamp.
last_selftest_ts	Number	Last selftest timestamp.
selftest_ts	Number	Current selftest timestamp.
se_state	Numbe	(optional) Secure Enclave status (on Encedo PPA).

Indirectly produced log entries

Event	Result	Source
LOG_TYPE_TRNG_FAILED	LOG_RESULT_OK	Entropy test failed
LOG_TYPE_KEY_INTEGRITY_ERROR	LOG_RESULT_FAILED	Keystore integrity failed
LOG_TYPE_KEY_INTEGRITY_ERROR	LOG_RESULT_OK	Keystore integrity passed
LOG_TYPE_NON_SECURE_STATE	LOG_RESULT_OK	Enter FLS state
LOG_TYPE_SELFTEST_PASSED	LOG_RESULT_FAILED	Powerup self-test failed
LOG_TYPE_SELFTEST_PASSED	LOG_RESULT_OK	Powerup self-test passed