intel / intel/confidential-computing.sgx

aesmd user error code status=217/USER, aesmd error Failed to load QE3: 0x4001

Open
#935 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
C++
Stars
1.5k
Forks
565
PR merge metrics
No merged PRs in 30d

Description

Hi all, I am trying to start the aesmd service after installing the intel sgx sdk and psw (so that I can use gramine)

From what I read, it seems like the installation of PSW installs the aesmd service
The following occurs when I try to start the service.

● aesmd.service - Intel(R) Architectural Enclave Service Manager
Loaded: loaded (/lib/systemd/system/aesmd.service; disabled; vendor preset: enabled)
Active: activating (auto-restart) (Result: exit-code)
Process: 180185 ExecStartPre=/opt/intel/sgx-aesm-service/aesm/linksgx.sh (code=exited, status=217/USER)

Additionally, when I FIRST installed the SDK and PSW packages, the aesmd service started but with another error: I think they are two different issues? but may be related?

`● aesmd.service - Intel(R) Architectural Enclave Service Manager
Loaded: loaded (/lib/systemd/system/aesmd.service; enabled; vendor preset: enabled)
Active: active (running)
Process: 1672 ExecStartPre=/opt/intel/sgx-aesm-service/aesm/linksgx.sh (code=exited, status=0/SUCCESS)
Process: 1681 ExecStartPre=/bin/mkdir -p /var/run/aesmd/ (code=exited, status=0/SUCCESS)
Process: 1693 ExecStartPre=/bin/chown -R aesmd:aesmd /var/run/aesmd/ (code=exited, status=0/SUCCESS)
Process: 1694 ExecStartPre=/bin/chmod 0755 /var/run/aesmd/ (code=exited, status=0/SUCCESS)
Process: 1695 ExecStartPre=/bin/chown -R aesmd:aesmd /var/opt/aesmd/ (code=exited, status=0/SUCCESS)
Process: 1696 ExecStartPre=/bin/chmod 0750 /var/opt/aesmd/ (code=exited, status=0/SUCCESS)
Process: 1697 ExecStart=/opt/intel/sgx-aesm-service/aesm/aesm_service (code=exited, status=0/SUCCESS)
Main PID: 1698 (aesm_service)
Tasks: 4 (limit: 18756)
Memory: 4.0M
CGroup: /system.slice/aesmd.service
└─1698 /opt/intel/sgx-aesm-service/aesm/aesm_service

Feb 20 22:46:59 ubuntu-server systemd[1]: Stopped Intel(R) Architectural Enclave Service Manager.
Feb 20 22:46:59 ubuntu-server systemd[1]: Starting Intel(R) Architectural Enclave Service Manager...
Feb 20 22:46:59 ubuntu-server aesm_service[1697]: aesm_service: warning: Turn to daemon. Use "--no-daemon" option to execute in foreground.
Feb 20 22:46:59 ubuntu-server systemd[1]: Started Intel(R) Architectural Enclave Service Manager.
Feb 20 22:46:59 ubuntu-server aesm_service[1698]: [ADMIN]White List update requested
Feb 20 22:46:59 ubuntu-server aesm_service[1698]: [init ../../../psw/ae/aesm_service/source/core/ipc/UnixCommunicationSocket.cpp:225] Failed to connect to socket /var/run/>
Feb 20 22:46:59 ubuntu-server aesm_service[1698]: [load_qe ../qe_logic.cpp:698] Error, call sgx_create_enclave QE fail [load_qe], SGXError:4001.
Feb 20 22:46:59 ubuntu-server aesm_service[1698]: Failed to load QE3: 0x4001
Feb 20 22:46:59 ubuntu-server aesm_service[1698]: The server sock is 0x556d216c0400
Feb 20 22:46:59 ubuntu-server aesm_service[1698]: [ADMIN]White list update request successful for Version: 115`

I tried the following:

- Uninstalling the driver by following the uninstall steps on https://github.com/intel/linux-sgx-driver , and running the ./uninstall.sh script for uninstalling the SDK.
I tried to reinstall PSW, SDK and the Driver by redoing the installation steps.

- Intel SGX is enabled on BIOS

Are there any suggestions as to what I can do for this error code? Also, aside from make clean, are there instructions as to completely uninstalling aesmd service so that I can install it again with the PSW installation instructions?

TIA

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.