intel / intel/confidential-computing.tee.dcap

What exactly should I do for the 'SGX_QL_QV_RESULT_OUT_OF_DATE' error

Open
#148 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
C
Stars
326
Forks
198
PR merge metrics
No merged PRs in 30d

Description

Hi,
I got the following error code (A002) from the QuoteGenerationSample/QuoteVerificationSample codes.
I've updated BIOS, microcode (and ME for Z490-P board), but nothing has changed.
I wonder what I should do to get SGX_QL_QV_RESULT_OK?

Here are the error code and my environments.

```
Trusted quote verification:
Info: get target info successfully returned.
Info: sgx_qv_set_enclave_load_policy successfully returned.
Info: sgx_qv_get_quote_supplemental_data_size successfully returned.
Info: App: sgx_qv_verify_quote successfully returned.
Info: Ecall: Verify QvE report and identity successfully returned.
Warning: App: Verification completed with Non-terminal result: a002
```

I found that the error code 'A002' is SGX_QL_QV_RESULT_OUT_OF_DATE, which means
> SGX_QL_QV_RESULT_OUT_OF_DATE - The SGX platform firmware and SW are not at the latest security patching level. The platform needs to be patched with firmware and/or software patches in order to produce an SGX_QL_QV_RESULT_OK verification result.

All used software is from here and 01.org (libsgx-ae-pce_2.12.100.3-focal1_amd64.deb, libsgx-headers*.deb, sgx-dcap-pccs_1.9.100.3-focal1_amd64.deb)

I've tested this on Ubuntu 20.04 with two CPU-mainboard combinations.
1. Xeon E-2176G + ASUS WS C246M PRO (Hyperthreading/Internal Graphics disabled)
2. Core i9-10900K + ASUS PRIME Z490-P (HT disabled, SGX software-controlled)

Details:
1. Xeon E-2176G + ASUS WS C246M PRO
```
intel-microcode
[ 0.000000] microcode: microcode updated early to revision 0xde, date = 2020-05-25
[ 0.952955] microcode: sig=0x906ea, pf=0x2, revision=0xde
[ 0.953132] microcode: Microcode Update Driver: v2.2.
```
```
BIOS
# dmidecode 3.2
Getting SMBIOS data from sysfs.
SMBIOS 3.2.0 present.
Table at 0x6FCA2000.

Handle 0x0000, DMI type 0, 26 bytes
BIOS Information
Vendor: American Megatrends Inc.
Version: 3301
Release Date: 03/23/2020
Address: 0xF0000
Runtime Size: 64 kB
ROM Size: 32 MB
Characteristics:
PCI is supported
BIOS is upgradeable
```

2. Core i9-10900K + ASUS PRIME Z490-P
```
intel-microcode
[ 0.000000] microcode: microcode updated early to revision 0xe0, date = 2020-07-08
[ 1.005987] microcode: sig=0xa0655, pf=0x2, revision=0xe0
[ 1.006395] microcode: Microcode Update Driver: v2.2.
```
```
BIOS
# dmidecode 3.2
Getting SMBIOS data from sysfs.
SMBIOS 3.2.0 present.
Table at 0x7FBB3000.

Handle 0x0000, DMI type 0, 26 bytes
BIOS Information
Vendor: American Megatrends Inc.
Version: 1601
Release Date: 11/27/2020
Address: 0xF0000
Runtime Size: 64 kB
ROM Size: 16 MB
Characteristics:
PCI is supported
BIOS is upgradeable
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.