topic Hi all! in Intel® Software Guard Extensions (Intel® SGX)

Enclave Trust is NOT TRUSTED

Majewski__John — Tue, 13 Aug 2019 15:48:31 GMT

I built the sgx-ra-sample on Win10, VS2015 pro, i9900k. I believe the SP server is configured properly with a linkable subscription. The result of running the client is:

---- Enclave Trust Status from Service Provider ----------------------------
Aug 12 2019 13:57:42 Enclave Trust is NOT TRUSTED and COMPLICATED. The client is out of date.
Aug 12 2019 13:57:42 A Platform Info Blob (PIB) was provided by the IAS
Aug 12 2019 13:57:42 +++ PIB: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx [x's inserted to mask pib]
Aug 12 2019 13:57:42 +++ sgx_report_attestation_status ret = 0x0000

Has anybody run into this problem? Thanks in advance!

Hi all!

Anandakumar — Wed, 14 Aug 2019 09:23:00 GMT

Hi all!

came here to post a similar issue!

I have built and installed PSW and SDK from current master branch.

Getting the following result after successfull Remote Attestation,

---- Enclave Trust Status from Service Provider ----------------------------
Enclave Trust is NOT TRUSTED and COMPLICATED. The client is out of date.
----------------------------------------------------------------------------
---- Platform Update Required ----------------------------------------------
The following Platform Update(s) are required to bring this
platform's Trusted Computing Base (TCB) back into compliance:
* Intel SGX Platform Software needs to be updated to the latest version.
* The CPU Microcode needs to be updated. Contact your OEM for a platform
BIOS Update.

Though i have built PSW from latest branch , it ask for PSW update. any reason for this?

What exactly needed to be done for CPU Micro code & BIOS update?

Thanks!

update :

Anandakumar — Wed, 14 Aug 2019 14:09:19 GMT

update :

Im using Dell Latitude E7470 and Cent OS 7.6, and i did upadted my system BIOS to latest version 1.21.6.

Still im getting the same result.

Natarajan, Anandakumar wrote:
Hi all!
came here to post a similar issue!
I have built and installed PSW and SDK from current master branch.
Getting the following result after successfull Remote Attestation,
---- Enclave Trust Status from Service Provider ----------------------------
Enclave Trust is NOT TRUSTED and COMPLICATED. The client is out of date.
----------------------------------------------------------------------------
---- Platform Update Required ----------------------------------------------
The following Platform Update(s) are required to bring this
platform's Trusted Computing Base (TCB) back into compliance:
* Intel SGX Platform Software needs to be updated to the latest version.
* The CPU Microcode needs to be updated. Contact your OEM for a platform
BIOS Update.
Though i have built PSW from latest branch , it ask for PSW update. any reason for this?
What exactly needed to be done for CPU Micro code & BIOS update?
Thanks!

Same problem with Ubuntu 18

Spisak-Spisacki__Krz — Wed, 14 Aug 2019 16:33:50 GMT

Same problem with Ubuntu 18.10 on Lenovo X270. Though I have not updated my BIOS yet and I've assumed it would do the trick. If that's not the case, I'm also interested in the solution.

I just reran the sgx-ra

Majewski__John — Thu, 15 Aug 2019 04:26:00 GMT

I just reran the sgx-ra-sample on a new machine, a Dell XPS 13 with Win10 and Skylake processor. I received a different result saying something to the effect of 'your system is out of date'. After updating the BIOS to the latest release, I received the same response as on my i9-9900k processor:

---- Enclave Trust Status from Service Provider ----------------------------
Enclave Trust is NOT TRUSTED and COMPLICATED. The client is out of date.
A Platform Info Blob (PIB) was provided by the IAS
+++ PIB: xxxxxxxxxxx [pib redacted for this post]
+++ sgx_report_attestation_status ret = 0x0000

It sounds like a few of us are having the same issue. Is there a way to open a support ticket with Intel?

Anyone has any updates on

Anandakumar — Mon, 19 Aug 2019 13:03:28 GMT

Anyone has any updates on this issue!?

@John I believe that creating

Spisak-Spisacki__Krz — Mon, 19 Aug 2019 14:04:37 GMT

@John I believe that creating ticket in https://github.com/intel/sgx-ra-sample/issues and/or shooting an e-mail to john.p.mechalas@intel.com (I believe he's the project maintainer) might increase your chances of getting a response from Intel.

Reporting issues with the

JohnMechalas — Mon, 19 Aug 2019 20:10:16 GMT

Reporting issues with the sample on GitHub is best as someone will see it even if I am sick, out of the office, etc.

We're looking into this issue.

Head over to https://github

Dan_Zimmerman — Mon, 19 Aug 2019 21:37:07 GMT

Head over to https://github.com/intel/sgx-ra-sample/issues/29 for updates.

Thanks everyone

Majewski__John — Tue, 20 Aug 2019 00:53:25 GMT

Thanks everyone