intel / intel/confidential-computing.sgx

SGX EPID problem

Open
#643 4 comments 0 reactions 0 assignees View on GitHub
Dominant language
C++
Stars
1.5k
Forks
565
PR merge metrics
No merged PRs in 30d

Description

I have a problem with sgx not being able to use the production app at the moment due to the inability to work in FLC mode.

mainboard : asrock z490 pro4 ( bios P.150 )
cpu : intel i7-10700K
os: ubuntu 20.04
sgx_v : sgx_linux_x64_driver_2.11.0_4505f07.bin
sgx_linux_x64_driver_1.36.2.bin

**journalctl -u aesmd.service -f**
------------------------------------------------------------------------
Dec 15 09:21:09 ubuntu systemd[1]: Started Intel(R) Architectural Enclave Service Manager.
Dec 15 09:21:09 ubuntu aesm_service[2726]: [ADMIN]White List update requested
Dec 15 09:21:09 ubuntu aesm_service[2726]: Failed to load QE3: 0x4004
Dec 15 09:21:09 ubuntu aesm_service[2726]: The server sock is 0x56190c70d740
Dec 15 09:21:09 ubuntu aesm_service[2726]: [ADMIN]White list update request successful for Version: 92
Dec 15 09:21:13 ubuntu aesm_service[2726]: [ADMIN]EPID Provisioning initiated
Dec 15 09:21:14 ubuntu aesm_service[2726]: The Request ID is d1f5967806524e989f71a4d06381a7e0
Dec 15 09:21:14 ubuntu aesm_service[2726]: The Request ID is 720916745b174192af6a5217d3dd8174
Dec 15 09:21:14 ubuntu aesm_service[2726]: [ADMIN]EPID Provisioning protocol error reported by Backend (9)
Dec 15 09:21:14 ubuntu aesm_service[2726]: [ADMIN]EPID Provisioning failed
------------------------------------------------------------------------
**sgx-detect --verbose**

Detecting SGX, this may take a minute...
✔ SGX instruction set
✔ CPU support
✔ CPU configuration
✔ Enclave attributes
✔ Enclave Page Cache
SGX features
✘ SGX2 ✘ EXINFO ✘ ENCLV ✘ OVERSUB ✘ KSS
Total EPC size: 94.0MiB
✘ Flexible launch control
✔ CPU support
✔ CPU configuration
✘ Able to launch production mode enclave
✔ SGX system software
✔ SGX kernel device (/dev/isgx)
✔ libsgx_enclave_common
✔ AESM service
✔ Able to launch enclaves
✔ Debug mode
✘ Production mode
✔ Production mode (Intel whitelisted)

🕮 SGX system software > Able to launch enclaves > Production mode
The enclave could not be launched. This might indicate a problem with FLC.

debug: failed to load report enclave
debug: cause: failed to load report enclave
debug: cause: The EINITTOKEN provider didn't provide a token
debug: cause: aesm error code GetLicensetokenError_6

More information: https://edp.fortanix.com/docs/installation/help/#run-enclave-prod

You're all set to start running SGX programs!
------------------------------------------------------------------------
ubuntu@ubuntu:~$ lsmod | grep sgx
isgx 53248 2
ubuntu@ubuntu:~$ dmesg | grep sgx
[ 3.014722] isgx: loading out-of-tree module taints kernel.
[ 3.014743] isgx: module verification failed: signature and/or required key missing - tainting kernel
[ 3.015039] intel_sgx: Intel SGX Driver v2.11.0
[ 3.015048] intel_sgx INT0E0C:00: EPC bank 0x80200000-0x86000000
[ 3.015853] intel_sgx: second initialization call skipped
------------------------------------------------------------------

I would like to know if this is exactly the motherboard manufacturer's problem, the cpu problem, or the software problem.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.