topic Hi Sam, in Intel® Software Guard Extensions (Intel® SGX)

Remote Attestation and IAS

SAM_R_2 — Thu, 08 Sep 2016 05:58:27 GMT

Hi,

If the enclave is first launched in machine A, it sends the quote to user and user stores it. When the enclave is launched in machine B, previous quote is invalid. Is connecting to IAS necessary again in this situation?

Is it possible that Intel allows so many end users to use IAS?

Is it possible that Intel allows some other companies to do the IAS work?

-Thanks

Hi Sam,

Surenthar_S_Intel — Thu, 08 Sep 2016 06:44:53 GMT

Hi Sam,

If the enclave is first launched in machine A, it sends the quote to user and user stores it. When the enclave is launched in machine B, previous quote is invalid. Is connecting to IAS necessary again in this situation?

Yes, connecting to IAS is necessary. when the enclave is launched in machine B, there is no “previous quote” unless the enclave has attested before.

Is it possible that Intel allows so many end users to use IAS?

Yes, Intel allows so many enclave to use IAS. Quotes are per enclave, not per user.

Is it possible that Intel allows some other companies to do the IAS work?

No, Intel doesn’t allows some other companies to do the IAS work.

Thanks and Reagrds,
Surenthar Selvaraj

Thanks for your information

SAM_R_2 — Thu, 08 Sep 2016 06:48:34 GMT

Thanks for your information