Intel® Software Guard Extensions (Intel® SGX)中的主题 Remote Attestation on NUC 9VXQNX

Remote Attestation on NUC 9VXQNX

suzaki — Mon, 05 Oct 2020 04:13:26 GMT

Can we use the Remote Attestation of SGX on NUC 9VXQNX which has Xeon CPU?

Re:Remote Attestation on NUC 9VXQNX

JesusG_Intel — Mon, 05 Oct 2020 15:54:58 GMT

Hello Suzaki,

Yes. The NUC 9VXQNX includes a Xeon E-2286 processor. The specs (https://www.intel.com/content/www/us/en/products/processors/core/core-vpro/e-2286m.html) for this processor show that it supports SGX, therefore, enclaves that run on it can be remotely attested.

Re: Re:Remote Attestation on NUC 9VXQNX

suzaki — Mon, 05 Oct 2020 23:06:56 GMT

Thank you for your quick reply.

I agree that the CPU is suitable for SGX and Remote Attestation.

My question is whether the platform " NUC 9VXQNX" has no problem for BIOS/UEFI to run Remote Attestation.

I read the post that tells some vendors BIOS/UEFI do not fit for Remote Attestation.

"Remote attestation still returns "configuration needed" with latest bios and microcode update"

https://community.intel.com/t5/Intel-Software-Guard-Extensions/Remote-attestation-still-returns-quot-configuration-needed-quot/m-p/1186063#M3720

Re:Remote Attestation on NUC 9VXQNX

JesusG_Intel — Tue, 06 Oct 2020 16:36:19 GMT

Hello Suzaki,

There are many factors that determine what response will be received from IAS during remote attestation. I recommend that you test the NUC using the remote attestation sample app in the Intel SGX SDK or the sgx-ra-sample found here, https://github.com/intel/sgx-ra-sample.

Re: Re:Remote Attestation on NUC 9VXQNX

suzaki — Wed, 07 Oct 2020 01:35:43 GMT

Hello Jesus,

I understand the situation.

I will buy a NUC 9VXQNX and try Remote Attestation on it.

Thank you.

Re:Remote Attestation on NUC 9VXQNX

JesusG_Intel — Wed, 07 Oct 2020 16:29:00 GMT

This thread has been marked as answered and Intel will no longer monitor this thread. If you want a response from Intel in a follow-up question, please open a new thread.