Some OwnerEpoch questions

Alon_J_ — Tue, 12 Apr 2016 13:30:21 GMT

Hi,

I have a new Dell Inspiron 13 (7000 series).

Where should I find the configure OwnerEpoch (OE) option? I can't find it anywhere in the BIOS menu.
What is the current (default?) OE value, before the user configures it?
Is this default OE value an SGX constant? Is it configured during manufacturing by Intel or by Dell?
Is there any way for a running system to obtain the current OE value?

Thanks,

Kuppusamy_R_Intel — Wed, 13 Apr 2016 10:13:51 GMT

1. Where should I find the configure OwnerEpoch (OE) option? I can't find it anywhere in the BIOS menu.

Usually OEM's will not show all the BIOS information. Please contact Dell technical assistant team.

2. What is the current (default?) OE value, before the user configures it?

Default OE Value is 128 bits

3. Is this default OE value an SGX constant? Is it configured during manufacturing by Intel or by Dell?

Yes, configured in firmware during manufacturing by OEM's( Dell).

4. Is there any way for a running system to obtain the current OE value?

The keys used for SGX enclaves are generated by the new instruction ‘EGETKEY’. The key is a combination of three factors (SGX Security Version Numbers, device ID and ‘Owner Epoch’)

topic Some OwnerEpoch questions in Intel® Software Guard Extensions (Intel® SGX)

Some OwnerEpoch questions