topic Re:Enclave.config.xml in Intel® Software Guard Extensions (Intel® SGX)

Enclave.config.xml

littleQ — Mon, 24 Jul 2023 09:13:50 GMT

Hello! Recently, I used WAMR. I changed Enclave.config.xml,and got some error.

First, the original Enclave.config.xml is as follows:

<!-- Please refer to User's Guide for the explanation of each field -->
<EnclaveConfiguration>
  <ProdID>0</ProdID>
  <ISVSVN>0</ISVSVN>
  <StackMaxSize>0x100000</StackMaxSize>
  <HeapMaxSize>0x8000000</HeapMaxSize>
  <ReservedMemMaxSize>0x1000000</ReservedMemMaxSize>
  <ReservedMemExecutable>1</ReservedMemExecutable>
  <TCSNum>10</TCSNum>
  <TCSPolicy>1</TCSPolicy>
  <DisableDebug>0</DisableDebug>
  <MiscSelect>0</MiscSelect>
  <MiscMask>0xFFFFFFFF</MiscMask>
</EnclaveConfiguration>

I tried these behavious:

I didn't modify the Enclave.config.xml, and used command make SGX_PRERELEASE=1 SGX_DEBUG=0 SGX_MODE=HW. The result is no error.
I only modified MiscSelect option to 1, and used command make SGX_PRERELEASE=1 SGX_DEBUG=0 SGX_MODE=HW. The result is as follows:

Failed to create enclave from enclave.signed.so, error code: 1
Fail to initialize enclave.

The sgxsdk I used is the version of 2.19. I run the Cxx11SGXDemo in the linux-sgx. I only modified MiscSelect option to 1, and used command make SGX_PRERELEASE=1 SGX_DEBUG=0 SGX_MODE=HW. The result is no error.
Does it mean that WAMR doesn't support SGX2?

Re:Enclave.config.xml

Wan_Intel — Tue, 25 Jul 2023 02:12:41 GMT

Hello LittleQ,

Thanks for reaching out to us.

May I know what Operating System and Kernel version are you using on your machine?

You may check with uname -r command and lsb_release -a command.

Regards,

Wan

Re: Re:Enclave.config.xml

littleQ — Tue, 25 Jul 2023 06:10:51 GMT

My kernel version is: 6.1.31-060131-generic.

Distributor ID: Ubuntu
Description: Ubuntu 22.04.2 LTS
Release: 22.04
Codename: jammy

Re:Enclave.config.xml

Wan_Intel — Wed, 26 Jul 2023 02:36:29 GMT

Hello LittleQ,

Thanks for your information.

Let me check with relevant team and I'll update you at the earliest.

Regards,

Wan

Re:Enclave.config.xml

Wan_Intel — Wed, 02 Aug 2023 06:54:44 GMT

Hello LittleQ,

Thanks for your patience.

We've received feedback from the relevant team.

Could you please try the following steps and see if the issue can be resolved?

Run the following command in your terminal

cpuid | grep SGX2

Build the kernel that allows EDMM with the following GitHub page:

https://github.com/intel/sgx-emm

Regards,

Wan

Re:Enclave.config.xml

Wan_Intel — Sun, 13 Aug 2023 01:46:59 GMT

Hello LittleQ,

Thanks for your question.

If you need additional information from Intel, please submit a new question as this thread will no longer be monitored.

Regards,

Wan