intel / intel/confidential-computing.sgx
SGX EPID problem
- Dominant language
- C++
- Stars
- 1.5k
- Forks
- 565
- PR merge metrics
- No merged PRs in 30d
Description
I have a problem with sgx not being able to use the production app at the moment due to the inability to work in FLC mode.
mainboard : asrock z490 pro4 ( bios P.150 )
cpu : intel i7-10700K
os: ubuntu 20.04
sgx_v : sgx_linux_x64_driver_2.11.0_4505f07.bin
sgx_linux_x64_driver_1.36.2.bin
**journalctl -u aesmd.service -f**
------------------------------------------------------------------------
Dec 15 09:21:09 ubuntu systemd[1]: Started Intel(R) Architectural Enclave Service Manager.
Dec 15 09:21:09 ubuntu aesm_service[2726]: [ADMIN]White List update requested
Dec 15 09:21:09 ubuntu aesm_service[2726]: Failed to load QE3: 0x4004
Dec 15 09:21:09 ubuntu aesm_service[2726]: The server sock is 0x56190c70d740
Dec 15 09:21:09 ubuntu aesm_service[2726]: [ADMIN]White list update request successful for Version: 92
Dec 15 09:21:13 ubuntu aesm_service[2726]: [ADMIN]EPID Provisioning initiated
Dec 15 09:21:14 ubuntu aesm_service[2726]: The Request ID is d1f5967806524e989f71a4d06381a7e0
Dec 15 09:21:14 ubuntu aesm_service[2726]: The Request ID is 720916745b174192af6a5217d3dd8174
Dec 15 09:21:14 ubuntu aesm_service[2726]: [ADMIN]EPID Provisioning protocol error reported by Backend (9)
Dec 15 09:21:14 ubuntu aesm_service[2726]: [ADMIN]EPID Provisioning failed
------------------------------------------------------------------------
**sgx-detect --verbose**
Detecting SGX, this may take a minute...
✔ SGX instruction set
✔ CPU support
✔ CPU configuration
✔ Enclave attributes
✔ Enclave Page Cache
SGX features
✘ SGX2 ✘ EXINFO ✘ ENCLV ✘ OVERSUB ✘ KSS
Total EPC size: 94.0MiB
✘ Flexible launch control
✔ CPU support
✔ CPU configuration
✘ Able to launch production mode enclave
✔ SGX system software
✔ SGX kernel device (/dev/isgx)
✔ libsgx_enclave_common
✔ AESM service
✔ Able to launch enclaves
✔ Debug mode
✘ Production mode
✔ Production mode (Intel whitelisted)
🕮 SGX system software > Able to launch enclaves > Production mode
The enclave could not be launched. This might indicate a problem with FLC.
debug: failed to load report enclave
debug: cause: failed to load report enclave
debug: cause: The EINITTOKEN provider didn't provide a token
debug: cause: aesm error code GetLicensetokenError_6
More information: https://edp.fortanix.com/docs/installation/help/#run-enclave-prod
You're all set to start running SGX programs!
------------------------------------------------------------------------
ubuntu@ubuntu:~$ lsmod | grep sgx
isgx 53248 2
ubuntu@ubuntu:~$ dmesg | grep sgx
[ 3.014722] isgx: loading out-of-tree module taints kernel.
[ 3.014743] isgx: module verification failed: signature and/or required key missing - tainting kernel
[ 3.015039] intel_sgx: Intel SGX Driver v2.11.0
[ 3.015048] intel_sgx INT0E0C:00: EPC bank 0x80200000-0x86000000
[ 3.015853] intel_sgx: second initialization call skipped
------------------------------------------------------------------
I would like to know if this is exactly the motherboard manufacturer's problem, the cpu problem, or the software problem.
Contributor guide
Assessment
This issue has not been assessed yet.