topic Re:DCAP Quote Generation Sample Code error 0xe065 in Intel® Software Guard Extensions (Intel® SGX)

DCAP Quote Generation Sample Code error 0xe065

ChrisCode — Tue, 18 Apr 2023 18:02:47 GMT

Hello,

I want to run the Quote Generation Example from Github.

However when running ./app I always receive this error:

Step1: Call sgx_qe_get_target_info:[get_platform_quote_cert_data ../qe_logic.cpp:378] Error returned from the p_sgx_get_quote_config API. 0xe065

Error in sgx_qe_get_target_info. 0xe065

The system uses Ubuntu 22.04.,

sgx_linux_x64_driver_2.11.54c9c4c.bin,

sgx_linux_x64_sdk_2.19.100.3.bin

and the latest PCKIDRetrievalTool.

Thanks in advance for you help.

Re:DCAP Quote Generation Sample Code error 0xe065

KFPW_Intel — Wed, 19 Apr 2023 04:17:09 GMT

Hi ChrisCode,

Thank you for your question in Intel® SGX community.

We are looking into this case. Can you provide us the output of these commands to ensure the drivers are loaded correctly:

ls -la /dev/sgx*

Furthermore, we would like to understand if your processor support Flexible Launch Control (FLC) to check if Out-of-Tree driver installation is required. To verify the driver loaded correctly, check that the device shows up in the /dev folder:

ls -la /dev/isgx

Refer Intel® SGX Software Installation Guide for Linux* OS for more information.

Looking forward to hearing from you. Thank you.

Regards,

Ken

Re: Re:DCAP Quote Generation Sample Code error 0xe065

ChrisCode — Wed, 19 Apr 2023 15:08:39 GMT

Hi,

I removed the OOT driver again, since I read in the installation guide, that it's not recommended for devices, that support FLC. My device (Intel NUC) does.

The output of ls -la /dev/sgx* is:

crw-rw-rw- 1 root sgx 10, 125 Apr 19 14:11 /dev/sgx_enclave
crw-rw---- 1 root sgx_prv 10, 126 Apr 19 14:11 /dev/sgx_provision
crw------- 1 root root 10, 124 Apr 19 14:11 /dev/sgx_vepc

/dev/sgx:
total 0
drwxr-xr-x 2 root root 80 Apr 19 14:11 .
drwxr-xr-x 20 root root 4200 Apr 19 14:11 ..
lrwxrwxrwx 1 root root 14 Apr 19 14:11 enclave -> ../sgx_enclave
lrwxrwxrwx 1 root root 16 Apr 19 14:11 provision -> ../sgx_provision

Is it even possible to use the DCAP example if I am not able to use the DCAP driver?

Since I am on kernel 5.16 I have in-kernel support and installing the DCAP driver results in the following error:

"Can't install DCAP SGX driver with in-kernel SGX support”

Re:DCAP Quote Generation Sample Code error 0xe065

JesusG_Intel — Mon, 24 Apr 2023 15:57:15 GMT

Hello ChrisCode,

The in-kernel SGX driver supports DCAP so you do not have to install a separate DCAP driver.

Since you are likely using an insecure certificate for your PCCS service set “use_secure_cert”: false in /etc/sgx_default_qcnl.conf:

// To accept insecure HTTPS certificate, set this option to false

"use_secure_cert": false,

Regards,

Jesus G.

Intel Customer Support

Re:DCAP Quote Generation Sample Code error 0xe065

KFPW_Intel — Fri, 28 Apr 2023 01:42:32 GMT

Hi ChrisCode,

I hope the information we provided was helpful to you. Do you need further help with this issue?

Please inform us if you have any questions. Thank you.

Regards,

Ken

Re: DCAP Quote Generation Sample Code error 0xe065

ChrisCode — Fri, 28 Apr 2023 16:01:02 GMT

Sorry, I forgot to close the issue.

The problem was, that there were still some dependencies of my previous OOT driver installation.

After I removed everything, it worked.

Thanks for you help!

Re:DCAP Quote Generation Sample Code error 0xe065

KFPW_Intel — Tue, 02 May 2023 01:40:33 GMT

Hi ChrisCode,

Thank you for the confirmation that everything is working on your side.

This thread has been marked as answered and Intel will no longer monitor this thread. If you want a response from Intel in a follow-up question, please open a new thread.

Regards,

Ken

Re: DCAP Quote Generation Sample Code error 0xe065

laduiw — Thu, 11 Jan 2024 13:45:43 GMT

Sorry, I met the same problem, can you give me a more detailed solution to this problem and what packages do you remove？Thanks