topic Re:SGX XFRM support? in Intel® Software Guard Extensions (Intel® SGX)

SGX XFRM support?

littleQ — Thu, 20 Jul 2023 08:56:00 GMT

hello. I want to run sgx using enarx. But when I run sudo enarx platform info, it shows that:

✗ Backend: sgx

✔ Driver: /dev/sgx_enclave

✔ CPU: Intel(R) Xeon(R) Silver 4410Y | GenuineIntel

✔ SGX Support

✔ Version 1

✔ Version 2

✔ FLC Support

✔ Max Size (32-bit): 2 GiB

✔ Max Size (64-bit): 64 PiB

✔ MiscSelect: EXINFO

✔ Features: DEBUG | MODE64BIT | PROVISIONING_KEY | EINIT_KEY | KSS

✗ Xfrm

✔ EPC Size: 4 GiB

✔ Intel CRL cache

✔ AESM Daemon Socket: /var/run/aesmd/aesm.socket.

Then I wonder how to enable Xfrm?

My CPU is Intel(R) Xeon(R) Silver 4410Y.

Re:SGX XFRM support?

Aznie_Intel — Sun, 23 Jul 2023 23:49:48 GMT

Hi LittleQ,

That XFRM setting can be changed by the hypervisor in the ATTRIBUTES for the VM. We would suggest you check with VM or Enarx Github for further support.

Additionally, you may follow the Enarx setup for SGX and please ensure the Linux kernel with patches was applied from this specific tree reference: https://enarx.dev/docs/install

Regards,

Aznie

Re:SGX XFRM support?

Aznie_Intel — Wed, 09 Aug 2023 02:37:27 GMT

Hi LittleQ,

This thread will no longer be monitored since we have provided information. If you need any additional information from Intel, please submit a new question.

Regards,

Aznie