...

a) Lifecycle management of a “Vault” - CRUD (Create, Re operation for a a given set of Vaults and associated policies. Replace, Update, Delete) for Vaults

       - A list of vault configuration as part of the EVE node configuration

       - EVE node will post the status messages for the Vaule CRUD operation results. 

b) Association of Edge Containers with a Vault - To control data at rest requirements of a Edge Container

       - The app instance configuration may include a reference to a defined vault. 

c) Attestation of the device through PCR quote and Nonce and/or Geo-location/IP Address information. 

...

              This will be done device reboot along with periodic frequencyperiodically, to make sure the EVE node is not compromised.

Same API that carries other config, handled by zedAgent

...