topic Fixed. in Intel® Software Guard Extensions (Intel® SGX)

Linux RemoteAttestation Sample code Failed

Changzheng_W_Intel — Sat, 08 Oct 2016 07:18:54 GMT

I build linux RemoteAttestation Sample code on a SGX enabled PC with cmd

make SGX_MODE=HW SGX_DEBUG=1

and run ./app, got the error outpur as below:

root@qat-sgx-pc:/opt/intel/sgxsdk/SampleCode/RemoteAttestation# ./app

Call sgx_create_enclave success.
Call enclave_init_ra success.
Error, call sgx_ra_get_msg1 fail [main].
Call enclave_ra_close success.
Enter a character before exit ...

I also ran other Sample code in SDK, such as SampleEnclave and LocalAttestation in HW mode, they are all OK.

My OS is ubuntu 14.04, and my network is Intel internal network.

If I configure the network proxy, it will hang at "Call sgx_create_enclave success." for a while then failed with above message.

If I disable the network proxy, it will immediately fail with above message.

Is there any configuration related to network for this RemoteAttestation sample code?

Thanks

Fixed.

Changzheng_W_Intel — Sun, 09 Oct 2016 00:33:14 GMT

Fixed.

EPID Provisioning needs network access. Setting proxy in /etc/aesmd.conf as:

proxy type = manual

aesm proxy = proxy.host:port

Then restart aesmd service using "service aesmd restart"

By the way, the SGX (driver/psw/sdk) need to be upgraded to the latest 1.6 release (I used version 1.5 at the beginning and then get SGX_ERROR_UPDATE_NEEDED error), then the sample code works well

Re: Fixed.

sz — Fri, 16 Apr 2021 07:13:49 GMT

Hi，Changzheng_W_Intel.

How can i set the proxy value?

and

Does the value is the EPID Provisioning service Host?

thanks ~