intel / intel/confidential-computing.tee.dcap
What exactly should I do for the 'SGX_QL_QV_RESULT_OUT_OF_DATE' error
- Dominant language
- C
- Stars
- 326
- Forks
- 198
- PR merge metrics
- No merged PRs in 30d
Description
Hi,
I got the following error code (A002) from the QuoteGenerationSample/QuoteVerificationSample codes.
I've updated BIOS, microcode (and ME for Z490-P board), but nothing has changed.
I wonder what I should do to get SGX_QL_QV_RESULT_OK?
Here are the error code and my environments.
```
Trusted quote verification:
Info: get target info successfully returned.
Info: sgx_qv_set_enclave_load_policy successfully returned.
Info: sgx_qv_get_quote_supplemental_data_size successfully returned.
Info: App: sgx_qv_verify_quote successfully returned.
Info: Ecall: Verify QvE report and identity successfully returned.
Warning: App: Verification completed with Non-terminal result: a002
```
I found that the error code 'A002' is SGX_QL_QV_RESULT_OUT_OF_DATE, which means
> SGX_QL_QV_RESULT_OUT_OF_DATE - The SGX platform firmware and SW are not at the latest security patching level. The platform needs to be patched with firmware and/or software patches in order to produce an SGX_QL_QV_RESULT_OK verification result.
All used software is from here and 01.org (libsgx-ae-pce_2.12.100.3-focal1_amd64.deb, libsgx-headers*.deb, sgx-dcap-pccs_1.9.100.3-focal1_amd64.deb)
I've tested this on Ubuntu 20.04 with two CPU-mainboard combinations.
1. Xeon E-2176G + ASUS WS C246M PRO (Hyperthreading/Internal Graphics disabled)
2. Core i9-10900K + ASUS PRIME Z490-P (HT disabled, SGX software-controlled)
Details:
1. Xeon E-2176G + ASUS WS C246M PRO
```
intel-microcode
[ 0.000000] microcode: microcode updated early to revision 0xde, date = 2020-05-25
[ 0.952955] microcode: sig=0x906ea, pf=0x2, revision=0xde
[ 0.953132] microcode: Microcode Update Driver: v2.2.
```
```
BIOS
# dmidecode 3.2
Getting SMBIOS data from sysfs.
SMBIOS 3.2.0 present.
Table at 0x6FCA2000.
Handle 0x0000, DMI type 0, 26 bytes
BIOS Information
Vendor: American Megatrends Inc.
Version: 3301
Release Date: 03/23/2020
Address: 0xF0000
Runtime Size: 64 kB
ROM Size: 32 MB
Characteristics:
PCI is supported
BIOS is upgradeable
```
2. Core i9-10900K + ASUS PRIME Z490-P
```
intel-microcode
[ 0.000000] microcode: microcode updated early to revision 0xe0, date = 2020-07-08
[ 1.005987] microcode: sig=0xa0655, pf=0x2, revision=0xe0
[ 1.006395] microcode: Microcode Update Driver: v2.2.
```
```
BIOS
# dmidecode 3.2
Getting SMBIOS data from sysfs.
SMBIOS 3.2.0 present.
Table at 0x7FBB3000.
Handle 0x0000, DMI type 0, 26 bytes
BIOS Information
Vendor: American Megatrends Inc.
Version: 1601
Release Date: 11/27/2020
Address: 0xF0000
Runtime Size: 64 kB
ROM Size: 16 MB
Characteristics:
PCI is supported
BIOS is upgradeable
```
Contributor guide
Assessment
This issue has not been assessed yet.