Troubleshooting
tls_cert_fetched: FAIL β Hostname/IP does not match certificate's altnames
SecretVM TLS certs are issued for a hostname, not the bare IP. Verify by hostname (e.g. my-vm.vm.scrtlabs.com), not the IP literal.
workload_binding_verified: FAIL
The VM is genuine, but the docker-compose.yaml you passed (or that the VM serves) does not match the launch measurement. Either you have the wrong compose file or the VM is not running what it advertises.
workload_binding_verified: FAIL β not_authentic
The MRTD/RTMR (TDX) or family_id/image_id (SEV-SNP) is not in the SecretVM registry. If you're on an older SDK release the auto-refresh will pull the latest registry from GitHub on the next miss; otherwise, upgrade with npm i -g secretvm-verify@latest or pip install -U secretvm-verify.
Was this helpful?