Implement Enterprise Key API.

chrome/app/policy/policy_templates.json

Index: chrome/app/policy/policy_templates.json
diff --git a/chrome/app/policy/policy_templates.json b/chrome/app/policy/policy_templates.json
index 43199263c2c7d5f024cfe1c2974933917fd946a8..864f7678f962585e1b6308a97337f6e64d6477c0 100644
--- a/chrome/app/policy/policy_templates.json
+++ b/chrome/app/policy/policy_templates.json
@@ -112,7 +112,7 @@
 #   persistent IDs for all fields (but not for groups!) are needed. These are
 #   specified by the 'id' keys of each policy. NEVER CHANGE EXISTING IDs,
 #   because doing so would break the deployed wire format!
-#   For your editing convenience: highest ID currently used: 198
+#   For your editing convenience: highest ID currently used: 200
 #
 # Placeholders:
 #   The following placeholder strings are automatically substituted:
@@ -4500,6 +4500,45 @@
 
       If not specified, will not modify the Variations seed URL.''',
     },
+    {
+      'name': 'Attestation',
+      'type': 'group',
+      'caption': 'Remote Attestation',
+      'desc': 'Configure the remote attestation with TPM mechanism.',
+      'policies': [
+        {
+          'name': 'AttestationEnabledForUser',
+          'type': 'main',
+          'schema': { 'type': 'boolean' },
+          'supported_on': ['chrome_os:28-'],
+          'features': {
+            'dynamic_refresh': True,
+            'per_profile': False,

[Mattias Nissler (ping if slow), 2013/04/10 16:53:26]

per_profile: False implies that this will not work with multi-profile. New
features should be per_profile: True if possible, any thoughts on this?

[davidyu, 2013/04/11 07:04:21]

Done.

+          },
+          'example_value': True,
+          'id': 199,
+          'caption': '''Enable remote attestation for the user.''',
+          'desc': '''If true, the user can use the hardware on Chrome devices to remote attest its identity to the privacy CA. Otherwise, this function is disabled.''',
+        },
+        {
+          'name': 'AttestationExtensionWhitelist',
+          'type': 'list',
+          'schema': {
+            'type': 'array',
+            'items': { 'type': 'string' },
+          },
+          'supported_on': ['chrome_os:28-'],
+          'features': {
+            'dynamic_refresh': True,
+            'per_profile': False,

[Mattias Nissler (ping if slow), 2013/04/10 16:53:26]

same here, I guess this probably should be True.

[davidyu, 2013/04/11 07:04:21]

Done.

+          },
+          'example_value': ['ghdilpkmfbfdnomkmaiogjhjnggaggoi'],
+          'id': 200,
+          'caption': '''Extensions allowed to to use the remote attestation API.''',
+          'desc': '''This policy specifies the allowed extenions to use Enterprise Key API chrome.enterprise.enterpriseKeyPrivate.*. Extensions must be added to this list to use the API.''',
+        },
+      ],
+    },
   ],
   'messages': {
     # Messages that are not associated to any policies.