topic Re:Re: problem in running https://github.com/intel/sgx-ra-sample in Intel® Software Guard Extensions (Intel® SGX)

Re: problem in running https://github.com/intel/sgx-ra-sample

mzaman — Wed, 13 Jan 2021 22:45:15 GMT

It would be really helpful if you please elaborate the solution. I am facing the same problem.

Re: problem in running https://github.com/intel/sgx-ra-sample

JesusG_Intel — Fri, 15 Jan 2021 00:40:34 GMT

Hello mzaman,

Install the SGX SDK for Linux and the Intel SGX Platform Software (PSW) according to the instructions in the Intel SGX Installation Guide for Linux.

The file libsgx_uae_service.so is in sgxsdk/lib64. Add this path to the environment variable LD_LIBRARY_PATH using one of two methods:

$ source sgxsdk/environment (preferred so that all of your paths are set correctly)

$ export LD_LIBRARY_PATH=sgxsdk/lib64:$LD_LIBRARY_PATH

Sincerely,

Jesus G.

Intel Customer Support

Re: problem in running https://github.com/intel/sgx-ra-sample

mzaman — Fri, 15 Jan 2021 18:28:32 GMT

Hi Jesus,

Thanks for replying. I follow all the steps.

Installed SGX driver (not DCAP), SGX-SDK, SGX-PSW (deb)
For aesm service I kept the proxy type default. So my aesmd.conf file is looked like:
        #proxy type = direct #direct type means no proxy used
         proxy type = default #system default proxy
        #proxy type = manual #aesm proxy should be specified for manual proxy type
        #aesm proxy = http://proxy_url:proxy_port
        #whitelist url = http://sample_while_list_url/
        #default quoting type = ecdsa_256
        #default quoting type = epid_linkable
        #default quoting type = epid_unlinkable
My sgxsdk and sgx-aesm-service installed in /opt/intel. So I set the path as you said [source /opt/intel/sgxsdk/environment]
Moreover all the sample code in sgxsdk is running properly
For sgx-ra-sample I am still facing the same problem (This system does not support Intel SGX.) when running ./run-client

If you please me direct me what else I can do it would be helpful.

Thanks,

Mzaman

Re: problem in running https://github.com/intel/sgx-ra-sample

JesusG_Intel — Fri, 15 Jan 2021 21:51:35 GMT

Hello Mzaman,

Send a screenshot of the output from:

ls /usr/lib/x86_64-linux-gnu/libsgx_*

It should look similar to the below. I installed all of the PSW components.

Re: problem in running https://github.com/intel/sgx-ra-sample

mzaman — Fri, 15 Jan 2021 22:06:04 GMT

Hi Jesus,

Thanks for reply. Here is the screenshot

Thanks,

Mzaman

Re: problem in running https://github.com/intel/sgx-ra-sample

mzaman — Fri, 15 Jan 2021 22:48:01 GMT

Hi,

I have two updates

I think client side is now working. I need to make again on the client side (my bad).
Now in client side showing 'Please use the correct SGX EPID library from PSW package.' Here is the screen shot of client and server

Thanks,

Mzaman

Re:Re: problem in running https://github.com/intel/sgx-ra-sample

JesusG_Intel — Sat, 16 Jan 2021 00:59:15 GMT

Hello Mzaman,

I think I figured it out. We should not have added the path sgxsdk/lib64 to the LD_LIBRARY_PATH. Do not source sgxsdk/environment. Remove it using:

$ export MY_PATH=/opt/intel/sgxsdk/lib64

$ export LD_LIBRARY_PATH="${LD_LIBRARY_PATH/${MY_PATH}:/}"

Copy libsgx_uae_service.so from sgxsdk/lib64 to /usr/lib/x86_64-linux-gnu/

sudo cp ../sgxsdk/lib64/libsgx_uae_service.so /usr/lib/x86_64-linux-gnu/

make clean && make

./run-client

Re: Re:Re: problem in running https://github.com/intel/sgx-ra-sample

mzaman — Tue, 19 Jan 2021 14:29:31 GMT

Hi Jesus,

Thanks for your reply. I remove the path and copy the libsgx_uae_service.so, still it's showing the same message Please use the correct SGX EPID library from PSW package. Can you please direct us what I am doing wrong?

Regards,

Mzaman

Re:Re: problem in running https://github.com/intel/sgx-ra-sample

JesusG_Intel — Tue, 19 Jan 2021 20:37:59 GMT

Hello Mzaman,

Let's try properly installing libsgx-uae-service:

$ sudo apt-get install libsgx-uae-service

Sincerely,

Jesus G.

Intel Customer Support

Re: Re:Re: problem in running https://github.com/intel/sgx-ra-sample

mzaman — Tue, 19 Jan 2021 21:40:02 GMT

Hello Jesus,

Thanks for your reply. Now I am getting the following output from the client side:

---- Enclave Trust Status from Service Provider ----------------------------
Enclave Trust is NOT TRUSTED and COMPLICATED. The client is out of date.
----------------------------------------------------------------------------

---- Platform Update Required ----------------------------------------------
The following Platform Update(s) are required to bring this
platform's Trusted Computing Base (TCB) back into compliance:

* The CPU Microcode needs to be updated. Contact your OEM for a platform
BIOS Update.

----------------------------------------------------------------------------

Should I update my BIOS? Thanks again for your help.

Regards,

Mzaman

Re:Re: problem in running https://github.com/intel/sgx-ra-sample

JesusG_Intel — Tue, 19 Jan 2021 21:47:29 GMT

Hello Mzaman,

It works!

Yes, you should get the latest BIOS from your OEM. Note that the latest BIOS may not have all of the necessary mitigations so you may still get Security Advisory reports from IAS.

Let's close this thread since your initial problem is resolved. Please open a new thread for follow-up questions.

Sincerely,

Jesus G.

Intel Customer Support

Re: Re:Re: problem in running https://github.com/intel/sgx-ra-sample

mzaman — Thu, 21 Jan 2021 14:14:33 GMT

Hi Jesus,

You are right. I am running the code with the updated bios still showing some IAS advisories. Thanks for helping to solve the problem.

We can close this thread.

Regards,

Mzaman