Implement Enterprise Key API.

chrome/app/policy/policy_templates.json

Index: chrome/app/policy/policy_templates.json
diff --git a/chrome/app/policy/policy_templates.json b/chrome/app/policy/policy_templates.json
index b1ea37a29ee1f73df85907abd008cc44f5b82456..6141e30dd5d6f2bd3ddc8009a455bbead8886cfb 100644
--- a/chrome/app/policy/policy_templates.json
+++ b/chrome/app/policy/policy_templates.json
@@ -112,7 +112,7 @@
 #   persistent IDs for all fields (but not for groups!) are needed. These are
 #   specified by the 'id' keys of each policy. NEVER CHANGE EXISTING IDs,
 #   because doing so would break the deployed wire format!
-#   For your editing convenience: highest ID currently used: 198
+#   For your editing convenience: highest ID currently used: 200
 #
 # Placeholders:
 #   The following placeholder strings are automatically substituted:
@@ -4500,6 +4500,45 @@
 
       If not specified, will not modify the Variations seed URL.''',
     },
+    {
+      'name': 'Attestation',
+      'type': 'group',
+      'caption': 'Remote Attestation',
+      'desc': 'Configure the remote attestation with TPM mechanism.',
+      'policies': [
+        {
+          'name': 'AttestationEnabledForUser',
+          'type': 'main',
+          'schema': { 'type': 'boolean' },
+          'supported_on': ['chrome_os:28-'],
+          'features': {
+            'dynamic_refresh': True,
+            'per_profile': True,
+          },
+          'example_value': True,
+          'id': 199,
+          'caption': '''Enable remote attestation for the user.''',
+          'desc': '''If true, the user can use the hardware on Chrome devices to remote attest its identity to the privacy CA. Otherwise, this function is disabled.''',

[Mattias Nissler (ping if slow), 2013/04/16 15:50:26]

Please explain here what "disabled" means.

Also needs a sentence explaining what happens when not set. This may seem silly,
but admins have specifically asked us for this piece in the part :)

[davidyu, 2013/04/17 05:39:15]

Done.

+        },
+        {
+          'name': 'AttestationExtensionWhitelist',
+          'type': 'list',
+          'schema': {
+            'type': 'array',
+            'items': { 'type': 'string' },
+          },
+          'supported_on': ['chrome_os:28-'],
+          'features': {
+            'dynamic_refresh': True,
+            'per_profile': True,
+          },
+          'example_value': ['ghdilpkmfbfdnomkmaiogjhjnggaggoi'],
+          'id': 200,
+          'caption': '''Extensions allowed to to use the remote attestation API.''',
+          'desc': '''This policy specifies the allowed extenions to use Enterprise Key API chrome.enterprise.enterpriseKeyPrivate.*. Extensions must be added to this list to use the API.''',

[Mattias Nissler (ping if slow), 2013/04/16 15:50:26]

spelling: extensions

Same comments on elaborating what happens if an extension is not on the list and
if the policy is not set.

[davidyu, 2013/04/17 05:39:15]

Done.

+        },
+      ],
+    },
   ],
   'messages': {
     # Messages that are not associated to any policies.