intel / intel/confidential-computing.sgx.sdk

How to debug "Enclave was not authorized" (errno 12290) in prerelease mode

Open
#32 12 comments 0 reactions 0 assignees View on GitHub
question
Dominant language
C++
Stars
2
Forks
3
PR merge metrics
No merged PRs in 30d

Description

Hey all,

My enclave runs fine in simulation mode. However I get the "enclave not authorized error" when trying to run in prerelease mode.

Have the requirements recently changed so that I need an authorized key that signed the enclave even in prerelease mode? Would love to get any kind of suggestions on how to resolve this.

Thanks,
Kai

EDIT: These are the compile flags I use to compile the enclave
```
-L/opt/intel/sgxsdk/lib64 -Wl,--no-undefined -Wl,--as-needed -Wl,-O1 -pie -Wl,--no-undefined -nostdlib -nodefaultlibs -nostartfiles -Wl,--whole-archive -Wl,--start-group -lsgx_trts -Wl,--no-whole-archive -Wl,--start-group -lsgx_tstdc -lsgx_tcxx -lsgx_tkey_exchange -lsgx_tcrypto -lsgx_tservice -ldocument_sgx -lcowlang_sgx -Wl,--end-group -Wl,-Bstatic -Wl,-Bsymbolic -Wl,--no-undefined -Wl,-pie,-eenclave_entry -Wl,--export-dynamic -Wl,--defsym,__ImageBase=0 -Wl,--gc-sections -Wl,--version-script=/home/kai/dev/credb/src/enclave/Enclave.lds /usr/local/lib/x86_64-linux-gnu/libdocument_sgx.a /usr/local/lib/x86_64-linux-gnu/libcowlang_sgx.a -Wl,--end-group
```

And this is the output of sgx_sign
```
tcs_num 50, tcs_max_num 50, tcs_min_pool 1
The required memory is 992870400B.
Succeed.

0
0
0x1000000
0x9000000
50
1
0
0
0xFFFFFFFF
1
0
0
0
0

```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.