intel / intel/confidential-computing.tee.dcap

MPA start failed and get pckcert 404

Open
#364 21 comments 0 reactions 0 assignees View on GitHub
Dominant language
C
Stars
326
Forks
198
PR merge metrics
No merged PRs in 30d

Description

Hello, I currently have a physical server machine with an Intel (R) Xeon (R) Silver 4310 * 2 CPU. The system is using Ubuntu 22.04, which was virtualized using EXSI7.0. Currently, the machine cannot be connected to the network.

1. I found that machines with multiple CPUs need to register to use SGX. I installed the MPA service, but the service exited after starting it
![图片](https://github.com/intel/SGXDataCenterAttestationPrimitives/assets/23696606/5fda1cf1-e06f-493a-a899-f6490fd3e67c)

2. I have enabled SGX reset mode and checked the log file/var/log/mpa_ Registration.log:

[22-01-2024 09:36:10] INFO: SGX Registration Agent version: 1.18.100.1
[22-01-2024 09:36:10] INFO: Starts Registration Agent Flow
[22-01-2024 09:36:10] Error: readUEFIVar: failed to open uefi variable/sys/firmware/efi/efivars/SgxRegistrationStatus-f236c5dc-a491-4bbe-bcdd-8885770df45, error: No such file or directory
[22-01-2024 09:36:10] Error: getRegistrationStatus: SgxRegistrationStatus UEFI variable was not found or size not as expected
[22-01-2024 09:36:10] Error: getRegistrationStatus: SgxRegistrationStatus automatic size: 0, expected size: 7
[22-01-2024 09:36:10] Error: Registration Flow - getRegistrationStatus failed, error: 4
[22-01-2024 09:36:10] INFO: setRegistrationStatus: status. status=0x1a, statusUefi. status=0x02
[22-01-2024 09:36:10] Error: writeUEFIVar: failed to open uefi variable/sys/firmware/efi/efivars/SgxRegistrationStatus-f236c5dc-a491-4bbe-bcdd-8885770df45, error: No such file or directory
[22-01-2024 09:36:10] Error: setRegistrationStatus: failed to write uefi variable
[22-01-2024 09:36:10] Error: setRegistrationStatus failed, error: 4
[22-01-2024 09:36:10] INFO: Completed Registration Agent Flow

3. This is my BISO settings:
![a2c4f0f8be0b4c412f226fbcda8fa0e](https://github.com/intel/SGXDataCenterAttestationPrimitives/assets/23696606/1eb0e18b-a2fd-4fc6-a5ac-805e2542aac9)


4. this is my ESXI settings:
![图片](https://github.com/intel/SGXDataCenterAttestationPrimitives/assets/23696606/0e00c9d4-7b63-4550-9bd1-dcdbeba2c20b)

My question is:

Q1: Do MPA services need to be connected to the internet in order to be used? Is it impossible to complete registration without connecting to the internet? Because I saw Intel_ SGX_ DCAP_ Multipackage_ The document SW.pdf states that networking is required
![图片](https://github.com/intel/SGXDataCenterAttestationPrimitives/assets/23696606/e7b82624-c7bc-43a3-873a-cc6e5a010654)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.