topic Software controlled SGX in Intel® Software Guard Extensions (Intel® SGX)

Software controlled SGX

Grigory_M_ — Wed, 08 Feb 2017 07:34:22 GMT

The BIOS of the motherboard (Asus z170 BIOS 3101) supports software controlled SGX. so, to use the SGX, it should be first activated by the software. I would expect that PSW installer should activate it, however, it does not have that functionality. It also does not export sgx_cap_enable_device/sgx_enable_device functions.

What should be the procedure to activate the SGX in this case? Are there any utilities/UEFI roms to activate it?

Thanks

What's Software Controlled

AArya2 — Wed, 08 Feb 2017 14:57:38 GMT

What's Software Controlled SGX?

(Sorry if the notification gave you the impression that this would be an answer :p)

sgx_enable_device is exposed

Francisco_C_Intel — Wed, 08 Feb 2017 15:30:01 GMT

sgx_enable_device is exposed in sgx_uae_service.dll

The SampleEnclave, for example, calls this API. The idea is that the PSW can be installed on systems where SGX isn't yet enabled. End-user applications that will actually use SGX functionality can enable it during their installation (sgx_cap_enable_device), or at runtime (sgx_enable_device).

Note that a restart is required afterwards.

Thanks, Francisco!

Grigory_M_ — Wed, 08 Feb 2017 17:40:13 GMT

Thanks, Francisco!

I was referring to the Linux SGX SDK. Is there any specification of what sgx_enable_device implementation in Windows SGX SDK does, so I could implement that functionality by myself, if no tool exists?

I don't believe so. Can you

Francisco_C_Intel — Wed, 08 Feb 2017 18:40:30 GMT

I don't believe so. Can you go to the BIOS and set SGX to ENABLED manually?

The BIOS only contains

Grigory_M_ — Wed, 08 Feb 2017 18:42:44 GMT

The BIOS only contains "software-controlled" SGX, no "Enabled" option.

Hi, Grigory.

Rodolfo_S_ — Fri, 10 Feb 2017 13:02:06 GMT

Hi, Grigory.

I believe this is still not available on the Linux SDK. What you could do is install a virtual machine with Windows and enable it from there.

Facing the same issue. Have

Kobi_G_ — Tue, 04 Apr 2017 08:24:56 GMT

Facing the same issue. Have Z170-A, confirmed that SGX exists on the CPU using CPUID, have only "software controlled" option for SGX in the bios. Is "sgx_enable_device" possible to call from Linux yet? Will a VM method even work?

Please see

Francisco_C_Intel — Fri, 30 Jun 2017 19:18:38 GMT

Please see

https://github.com/01org/linux-sgx/pull/107

I don't think it's been merged yet, but you should be able to use that to unblock your progress.

Thanks,

Francisco