DCAP Quote Generation Sample Code error 0xe065

[ChrisCode]

Hello, 

I want to run the Quote Generation Example from Github. 

However when running ./app I always receive this error: 

Step1: Call sgx_qe_get_target_info:[get_platform_quote_cert_data ../qe_logic.cpp:378] Error returned from the p_sgx_get_quote_config API. 0xe065

Error in sgx_qe_get_target_info. 0xe065

The system uses Ubuntu 22.04., 

sgx_linux_x64_driver_2.11.54c9c4c.bin,

sgx_linux_x64_sdk_2.19.100.3.bin

and the latest PCKIDRetrievalTool. 

Thanks in advance for you help. 

[KFPW_Intel]

Hi ChrisCode,

Thank you for your question in Intel® SGX community.

We are looking into this case. Can you provide us the output of these commands to ensure the drivers are loaded correctly:

ls -la /dev/sgx*

Furthermore, we would like to understand if your processor support Flexible Launch Control (FLC) to check if Out-of-Tree driver installation is required. To verify the driver loaded correctly, check that the device shows up in the /dev folder:

ls -la /dev/isgx

Refer Intel® SGX Software Installation Guide for Linux* OS for more information.

Looking forward to hearing from you. Thank you.

Regards,

Ken

[ChrisCode]

Hi,

I removed the OOT driver again, since I read in the installation guide, that it's not recommended for devices, that support FLC. My device (Intel NUC) does.

The output of ls -la /dev/sgx* is:

crw-rw-rw- 1 root sgx 10, 125 Apr 19 14:11 /dev/sgx_enclave
crw-rw---- 1 root sgx_prv 10, 126 Apr 19 14:11 /dev/sgx_provision
crw------- 1 root root 10, 124 Apr 19 14:11 /dev/sgx_vepc

/dev/sgx:
total 0
drwxr-xr-x 2 root root 80 Apr 19 14:11 .
drwxr-xr-x 20 root root 4200 Apr 19 14:11 ..
lrwxrwxrwx 1 root root 14 Apr 19 14:11 enclave -> ../sgx_enclave
lrwxrwxrwx 1 root root 16 Apr 19 14:11 provision -> ../sgx_provision

Is it even possible to use the DCAP example if I am not able to use the DCAP driver?

Since I am on kernel 5.16 I have in-kernel support and installing the DCAP driver results in the following error:

"Can't install DCAP SGX driver with in-kernel SGX support”

[JesusG_Intel]

Hello ChrisCode,

The in-kernel SGX driver supports DCAP so you do not have to install a separate DCAP driver.

Since you are likely using an insecure certificate for your PCCS service set “use_secure_cert”: false in /etc/sgx_default_qcnl.conf:

 // To accept insecure HTTPS certificate, set this option to false

 "use_secure_cert": false,

Regards,

Jesus G.

Intel Customer Support

[KFPW_Intel]

Hi ChrisCode,

I hope the information we provided was helpful to you. Do you need further help with this issue?

Please inform us if you have any questions. Thank you.

Regards,

Ken

[ChrisCode]

Sorry, I forgot to close the issue. 

The problem was, that there were still some dependencies of my previous OOT driver installation.

After I removed everything, it worked.  

Thanks for you help!

[laduiw]

Sorry, I met the same problem, can you give me a more detailed solution to this problem and what packages do you remove？Thanks

[KFPW_Intel]

Hi ChrisCode,

Thank you for the confirmation that everything is working on your side.

This thread has been marked as answered and Intel will no longer monitor this thread. If you want a response from Intel in a follow-up question, please open a new thread.

Regards,

Ken