topic Re: whether attestation services are available on my processor in Intel® Software Guard Extensions (Intel® SGX)

whether attestation services are available on my processor

maxdd — Mon, 17 Jan 2022 16:33:40 GMT

It mentions in the following url that ECDSA and EPID attestation are only available on selected processors. I am using 'Intel(R) Xeon(R) CPU E3-1270 v6 @ 3.80GHz' and I am wondering if those attestation services are available on my processor? Thanks for your help!

https://www.intel.com/content/www/us/en/developer/tools/software-guard-extensions/attestation-services.html

Re:whether attestation services are available on my processor

JesusG_Intel — Tue, 18 Jan 2022 22:05:18 GMT

Hello max max,

Your processor, Intel(R) Xeon(R) CPU E3-1270 v6 @ 3.80GH (navigate to the Security and Reliability section of the page), supports SGX and can be attested remotely by a service provider using Intel Attestation Service.

This article, Where is a List of Processors that Support Intel® Software Guard Extensions (Intel® SGX)?, describes how to find out if your processor supports SGX, which is necessary for remote attestation.

Regards,

Jesus G.

Intel Customer Support

Re: Re:whether attestation services are available on my processor

maxdd — Wed, 19 Jan 2022 02:29:56 GMT

Thanks for the reply.

I know my processor supports SGX. But where can I find if it supports Intel Attestation Service?

Or do all processors supporting SGX also support Intel Attestation Service (both ECDSA and EPID attestation)?

Re: whether attestation services are available on my processor

Junli_S_Intel — Wed, 19 Jan 2022 04:36:18 GMT

Your E3 processor should support both ECDSA and EPID attestation. Not all processors supporting SGX support both ECDSA and EPID attestation.

Current ICX-SP doesn't support EPID attestation

Re:whether attestation services are available on my processor

JesusG_Intel — Thu, 20 Jan 2022 00:25:28 GMT

Hello maxdd,

I apologize for misinterpreting your question. Junli, thanks for jumping in. To add more context...

To support ECDSA attestation, the processor needs to support SGX Flexible Launch Control (FLC). Unfortunately, there is no easy way to determine if an SGX processor also supports FLC but this article provides guidance: Which Platforms Support Intel® Software Guard Extensions (Intel® SGX) Datacenter Attestation Primitives (DCAP) and Flexible Launch Control (FLC)?

For EPID, all processors to date including client Intel Core and Xeon E WS/Server that have SGX all support EPID. Only the 3rd Generation Xeon Scalable (ICX) and all future Scalables will not support EPID. 3rd Generation Intel Xeon Scalable (ICX) and all future Intel Xeon Scalable processors will support only ECDSA/DCAP.

Regards,

Jesus G.

Intel Customer Support

Re:whether attestation services are available on my processor

JesusG_Intel — Fri, 21 Jan 2022 01:36:48 GMT

This thread has been marked as answered and Intel will no longer monitor this thread. If you want a response from Intel in a follow-up question, please open a new thread.

Re: Re:whether attestation services are available on my processor

Strackx — Mon, 24 Jan 2022 10:50:47 GMT

The `sgx-detect` tool from Fortnanix EDP returns a nice overview of the SGX features your processor supports.