Implement Enterprise Key API.

chrome/app/policy/policy_templates.json

Index: chrome/app/policy/policy_templates.json
diff --git a/chrome/app/policy/policy_templates.json b/chrome/app/policy/policy_templates.json
index 43199263c2c7d5f024cfe1c2974933917fd946a8..6b482794b22ebcc84b178bc4253750285fe3041b 100644
--- a/chrome/app/policy/policy_templates.json
+++ b/chrome/app/policy/policy_templates.json
@@ -112,7 +112,7 @@
 #   persistent IDs for all fields (but not for groups!) are needed. These are
 #   specified by the 'id' keys of each policy. NEVER CHANGE EXISTING IDs,
 #   because doing so would break the deployed wire format!
-#   For your editing convenience: highest ID currently used: 198
+#   For your editing convenience: highest ID currently used: 200
 #
 # Placeholders:
 #   The following placeholder strings are automatically substituted:
@@ -4500,6 +4500,45 @@
 
       If not specified, will not modify the Variations seed URL.''',
     },
+    {
+      'name': 'Attestation',
+      'type': 'group',
+      'caption': 'Remote Attestation',
+      'desc': 'Configure the remote attestation with TPM mechanism.',
+      'policies': [
+        {
+          'name': 'AttestationEnabledForUser',
+          'type': 'main',
+          'schema': { 'type': 'boolean' },
+          'supported_on': ['chrome_os:28-'],
+          'features': {
+            'dynamic_refresh': True,
+            'per_profile': False,

[Mattias Nissler (ping if slow), 2013/04/04 12:51:34]

Any chance to make this per-profile?

[davidyu, 2013/04/09 09:30:08]

I'm not quite sure about the difference for this feature. This policy is
supposed to apply on the user account, no matter which machine it is used.

[Mattias Nissler (ping if slow), 2013/04/10 16:53:25]

The definition of this flag is: "Can we set the policy differently for different
Profiles that are loaded in the same browser instance?" On the technical level,
this means basically "are you reading the policy via Profile::GetPrefs()"?

[davidyu, 2013/04/11 07:04:21]

Got it. Changed to true.

+          },
+          'example_value': True,
+          'id': 199,
+          'caption': '''Enable remote attestation for the user.''',
+          'desc': '''Allow the user to remote attest using the device TPM.''',

[Mattias Nissler (ping if slow), 2013/04/04 12:51:34]

Please elaborate on the description. It should specify behavior for the
different boolean values and also for the case that the policy is not set.

[davidyu, 2013/04/09 09:30:08]

Done.

+        },
+        {
+          'name': 'AttestationExtensionWhitelist',
+          'type': 'list',
+          'schema': {
+            'type': 'array',
+            'items': { 'type': 'string' },
+          },
+          'supported_on': ['chrome_os:28-'],
+          'features': {
+            'dynamic_refresh': True,
+            'per_profile': False,

[Mattias Nissler (ping if slow), 2013/04/04 12:51:34]

ditto

[davidyu, 2013/04/11 07:04:21]

Done.

+          },
+          'example_value': ['ghdilpkmfbfdnomkmaiogjhjnggaggoi'],
+          'id': 200,
+          'caption': '''Extensions allowed to to use the remote attestation API.''',
+          'desc': '''Only extenions which are whitelisted can use the enterprise remote attestation API.''',

[Mattias Nissler (ping if slow), 2013/04/04 12:51:34]

ditto

[davidyu, 2013/04/09 09:30:08]

Done.

+        },
+      ],
+    },
   ],
   'messages': {
     # Messages that are not associated to any policies.