VM: Set expected_sk_key to None
This does not affect the security of VM. So far, VMs are not using Sk
while in protected mode.
Test: Builds
Bug: 291213394
Change-Id: I89788dafa4fa176807c99d13baeff0b09098a15d
diff --git a/microdroid_manager/src/vm_secret.rs b/microdroid_manager/src/vm_secret.rs
index 0e1ec71..7df7cc9 100644
--- a/microdroid_manager/src/vm_secret.rs
+++ b/microdroid_manager/src/vm_secret.rs
@@ -101,7 +101,7 @@
let policy = sealing_policy(explicit_dice_chain).map_err(anyhow_err)?;
// Start a new session with Secretkeeper!
- let mut session = SkSession::new(sk_service, &explicit_dice)?;
+ let mut session = SkSession::new(sk_service, &explicit_dice, None)?;
let mut skp_secret = Zeroizing::new([0u8; SECRET_SIZE]);
if super::is_strict_boot() {
if super::is_new_instance() {