Question about Quote Enclave

[hyunsoo]

Theorically, Launch Enclave generates report and is conveyed to Quote Enclave. QE converts report to quote structure. In the RA example(https://github.com/intel/sgx-ra-sample), there is no related code with QE handling. I'm guessing that QE is initialized(launched) by calling `sgx_init_quote` and get the quote by calling `sgx_get_quote`. 

So, the question is how QE is launched, and who is responsible for it?

Thank you

[JesusG_Intel]

Hello hyunsoo,

The Quoting Enclave is one of the architectural enclaves that gets installed with the Intel SGX Platforms Software (PSW). Specifically, the QE, and other architectural enclaves, are managed by the Architectural Enclave Service Manager (AESM).

You can find the code for the PSW here: https://github.com/intel/linux-sgx/tree/master/psw

Sincerely,

Jesus G.

Intel Customer Support

[hyunsoo]

There is no calling a function related to QE handling in RA example(https://github.com/intel/sgx-ra-sample). I'm asking how QE was launched even if we never called directly. And how it is managed(scheduled)?

Thank you

[JesusG_Intel · Accepted solution]

Hello Hyunsoo,

The Quoting Enclave is installed with the Platform Software. The user never calls it directly. It is called and scheduled by the AESM. In other words, the user does not have to worry about calling the QE; it happens automatically.

Sincerely,

Jesus G.
Intel Customer Support

[JesusG_Intel]

Hello Hyunsoo,

Does this answer your questions regarding the Quoting Enclave?

Sincerely,

Jesus G.

Intel Customer Support

[JesusG_Intel]

This thread has been marked as answered and Intel will no longer monitor this thread. If you want a response from Intel in a follow-up question, please open a new thread.