intel / intel/confidential-computing.sgx

IAS query returns GROUP_OUT_OF_DATE

Open
#554 5 comments 0 reactions 0 assignees View on GitHub
Dominant language
C++
Stars
1.5k
Forks
565
PR merge metrics
No merged PRs in 30d

Description

Hi there, I'm currently using a NUC for some SGX related development work running the latest firmware that is available, details as follows:
> BaseBoard Manufacturer:"Intel Corporation"
> Bios Mode:"UEFI"
> Bios Version/Date:"BECFL357.86A.0081.2020.0504.1834,05/04/2020"
> Platform Role:"Linux nuc 4.15.0-106-generic #107-Ubuntu SMP Thu Jun 4 11:27:52 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux"
> Processor:"Intel(R) Core(TM) i7-8559U CPU @ 2.70GHz"
> SMBIOS Version:"3.2.1"
> System Manufacturer:"Intel(R) Client Systems"
> System Model:"NUC8i7BEH"

CPUINFO:
> vendor_id : GenuineIntel
> cpu family : 6
> model : 142
> model name : Intel(R) Core(TM) i7-8559U CPU @ 2.70GHz
> stepping : 10
> microcode : 0xd6

Performing a remote attestation with IAS results in a GROUP_OUT_OF_DATE response with the following advisories: ["INTEL-SA-00161", "INTEL-SA-00219", "INTEL-SA-00289", "INTEL-SA-00320,INTEL-SA-00329"].

Calling sgx_report_attestation_status results in the following:
> DEBUG] sgx: SGX_ERROR_UPDATE_NEEDED
> [DEBUG] ucodeUpdate: 1
> [DEBUG] csmeFwUpdate: 0
> [DEBUG] pswUpdate: 0

Downloaded the latest ucode file from https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files but it seems like I'm already running the latest ucode version.
> iucode_tool -S -l 06-8e-0a
> iucode_tool: system has processor(s) with signature 0x000806ea
> microcode bundle 1: 06-8e-0a
> selected microcodes:
> 001/001: sig 0x000806ea, pf_mask 0xc0, 2020-04-27, rev 0x00d6, size 103424

Any suggestions on what might be the problem?

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.