topic SGX Launch Control Enable in Intel® Software Guard Extensions (Intel® SGX)

SGX Launch Control Enable

Christophe_F_ — Wed, 19 Apr 2017 12:49:12 GMT

Hello,

In Intel Developer manual, it is said that in IA32_FEATURE_CONTROL MSR there is a bit called SGX Launch Control Enable that allows to change the IA32_SGXLEPUBKEYHASHn values. By default the hash is the SHA-256 hash of Intel public key.

I'm experimenting with an Intel NUC / Core i3-6100U and the CPU does not seem to support this feature. Which CPU models have this feature please ? Do I need a Kaby Lake CPU ?

Thanks in advance,

Christophe

Hi,

Anusha_K_Intel — Thu, 20 Apr 2017 05:55:00 GMT

Hi,

And the list of Supported hardware is given in this link: https://github.com/ayeks/SGX-hardware

Thanks, but my problem is not

Christophe_F_ — Thu, 20 Apr 2017 06:37:51 GMT

Thanks, but my problem is not to find SGX-compatible hardware (the Intel NUC I'm using is perfect for that), it's about a specific feature of SGX.

Hi, Cristophe.

Rodolfo_S_ — Tue, 25 Apr 2017 13:40:42 GMT

Hi, Cristophe.

This feature is available in Skylake CPUs, but it needs to be enabled in BIOS. The list of supported HW that Anusha sent actually reflects the devices that can enable SGX in BIOS. I would check with the manufacturer of your motherboard if the BIOS can do that, or if they intend to provide a BIOS update.

[]s

Rodolfo