intel / intel/confidential-computing.tee.dcap

Frequent "No certificate data for this platform" (0xe011) errors from qgsd

Open
#486 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
C
Stars
326
Forks
198
PR merge metrics
No merged PRs in 30d

Description

Hi team,

We've recently been seeing frequent issues where `qgsd` returns:

```
[QPL] No certificate data for this platform.
Error: p_sgx_get_quote_config API. 0xe011
```

At the same time, our PCCS logs show:

```
Encrypted ppid is all zeros
Error: No cache data for this platform.
```

This seems to map to `SGX_QL_NO_PLATFORM_CERT_DATA`, even though the host has valid PCK certificates (not expired, verified). The issue resolves only after re-running our registration tool (PCKIDRetrievalTool) and restarting services.

We suspect `p_encrypted_ppid == NULL` during quote generation, causing the request to Intel PCS to fail. But we are unsure why this happens intermittently on some hosts.

Could you help us understand the possible root cause or conditions under which `p_encrypted_ppid` might be NULL?

Thanks!

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.