Providing high availability computing service by issuing a certificate

A computer-implemented method for distributing a certificate to a trusted computing unit, the method comprising:

• receiving, by a trusted certificate generator, a first certificate request from a first computing unit running a first computing task, wherein a plurality of copies of the first computing task are executed by a plurality of computing units, the first computing unit is one of the plurality of computing units, the first certificate request comprises first authentication information comprising a first code hash of the first computing task;
• performing, by the trusted certificate generator, authentication on the first computing unit based on the first authentication information;
• in response to authenticating the first computing unit based on the first authentication information, obtaining, by the trusted certificate generator, a first certificate chain and a first private key that are generated for the first code hash, wherein the first certificate chain comprises a first root certificate and a corresponding first public key certificate, and the first public key certificate matches the first private key to form a first certificate pair;
• and
• sending, by the trusted certificate generator, a first certificate report to the first computing unit, wherein the first certificate report comprises the first certificate pair, thereby enabling the first computing unit to use itself as a transport layer security (TLS) server and to use the first certificate pair as a certificate pair of the TLS server.

A non-transitory, computer-readable medium storing one or more instructions executable by a computer system to perform operations comprising:

• receiving a first certificate request from a first computing unit running a first computing task, wherein a plurality of copies of the first computing task are executed by a plurality of computing units, the first computing unit is one of the plurality of computing units, the first certificate request comprises first authentication information comprising a first code hash of the first computing task;
• performing authentication on the first computing unit based on the first authentication information;
• in response to authenticating the first computing unit based on the first authentication information, obtaining a first certificate chain and a first private key that are generated for the first code hash, wherein the first certificate chain comprises a first root certificate and a corresponding first public key certificate, and the first public key certificate matches the first private key to form a first certificate pair;
• and
• sending a first certificate report to the first computing unit, wherein the first certificate report comprises the first certificate pair, thereby enabling the first computing unit to use itself as a transport layer security (TLS) server and to use the first certificate pair as a certificate pair of the TLS server.

A computer-implemented system, comprising:

• one or more computers;
• and
• one or more computer memory devices interoperably coupled with the one or more computers and having tangible, non-transitory, machine-readable media storing one or more instructions that, when executed by the one or more computers, perform one or more operations comprising:
• receiving a first certificate request from a first computing unit running a first computing task, wherein a plurality of copies of the first computing task are executed by a plurality of computing units, the first computing unit is one of the plurality of computing units, the first certificate request comprises first authentication information comprising a first code hash of the first computing task;
• performing authentication on the first computing unit based on the first authentication information;
• in response to authenticating the first computing unit based on the first authentication information, obtaining a first certificate chain and a first private key that are generated for the first code hash, wherein the first certificate chain comprises a first root certificate and a corresponding first public key certificate, and the first public key certificate matches the first private key to form a first certificate pair;
• and
• sending a first certificate report to the first computing unit, wherein the first certificate report comprises the first certificate pair, thereby enabling the first computing unit to use itself as a transport layer security (TLS) server and to use the first certificate pair as a certificate pair of the TLS server.