intel / intel/confidential-computing.tee.dcap

Verification completed with Non-terminal result: a003

Open
#367 2 comments 0 reactions 0 assignees View on GitHub
Dominant language
C
Stars
326
Forks
198
PR merge metrics
No merged PRs in 30d

Description

When I build `SGXDataCenterAttestationPrimitives/SampleCode/QuoteVerificationSample` and run app, I got a `Warning` with code `a003` in the verification:
```
Trusted quote verification:
Info: get target info successfully returned.
Info: sgx_qv_set_enclave_load_policy successfully returned.
Info: tee_get_quote_supplemental_data_version_and_size successfully returned.
Info: latest supplemental data major version: 3, minor version: 3, size: 536
Info: App: tee_verify_quote successfully returned.
Info: Ecall: Verify QvE report and identity successfully returned.
Warning: App: Verification completed with Non-terminal result: a003
Info: Supplemental data Major Version: 3
Info: Supplemental data Minor Version: 3

===========================================

Untrusted quote verification:
Info: tee_get_quote_supplemental_data_version_and_size successfully returned.
Info: latest supplemental data major version: 3, minor version: 3, size: 536
Info: App: tee_verify_quote successfully returned.
Warning: App: Verification completed with Non-terminal result: a003
Info: Supplemental data Major Version: 3
Info: Supplemental data Minor Version: 3
```
I referred to `/opt/intel/sgxsdk/include/sgx_qve_header.h` for the code `a003` and found:
```
SGX_QL_QV_RESULT_OUT_OF_DATE_CONFIG_NEEDED = SGX_QL_QV_MK_ERROR(0x0003),
///< The Quote is good but the TCB level of the platform is out
///< date and additional configuration of the SGX Platform at it
///< current patching level may be needed. The platform needs
///< patching to be at the latest TCB level
```
The experiment was done on Ubuntu 20.04 on a SGX server. I've updated SGX SDK, Intel PCCS and SGX SSL Library and got code `a002`. Then I updated BIOS and got code `a003`. This problem made me fail to finish remote attestation with librats. I wonder how can I fix it.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.