Intel® Software Guard Extensions (Intel® SGX)
Discussion board focused on hardware-based isolation and memory encryption to provide extended code protection in solutions.

DCAP Quote Generation Sample Code error 0xe065

ChrisCode
Novice
2,133 Views

Hello, 

I want to run the Quote Generation Example from Github. 

However when running ./app I always receive this error: 

Step1: Call sgx_qe_get_target_info:[get_platform_quote_cert_data ../qe_logic.cpp:378] Error returned from the p_sgx_get_quote_config API. 0xe065

Error in sgx_qe_get_target_info. 0xe065

 

The system uses Ubuntu 22.04., 

sgx_linux_x64_driver_2.11.54c9c4c.bin,

sgx_linux_x64_sdk_2.19.100.3.bin

and the latest PCKIDRetrievalTool. 

 

Thanks in advance for you help. 

0 Kudos
7 Replies
KFPW_Intel
Moderator
2,105 Views

Hi ChrisCode,

 

Thank you for your question in Intel® SGX community.

 

We are looking into this case. Can you provide us the output of these commands to ensure the drivers are loaded correctly:

 

ls -la /dev/sgx*

 

Furthermore, we would like to understand if your processor support Flexible Launch Control (FLC) to check if Out-of-Tree driver installation is required. To verify the driver loaded correctly, check that the device shows up in the /dev folder:

ls -la /dev/isgx

 

Refer Intel® SGX Software Installation Guide for Linux* OS for more information.


Looking forward to hearing from you. Thank you.

 

Regards,

Ken


0 Kudos
ChrisCode
Novice
2,082 Views

Hi,

I removed the OOT driver again, since I read in the installation guide, that it's not recommended for devices, that support FLC. My device (Intel NUC) does.

The output of ls -la /dev/sgx* is:

crw-rw-rw- 1 root sgx 10, 125 Apr 19 14:11 /dev/sgx_enclave
crw-rw---- 1 root sgx_prv 10, 126 Apr 19 14:11 /dev/sgx_provision
crw------- 1 root root 10, 124 Apr 19 14:11 /dev/sgx_vepc

/dev/sgx:
total 0
drwxr-xr-x 2 root root 80 Apr 19 14:11 .
drwxr-xr-x 20 root root 4200 Apr 19 14:11 ..
lrwxrwxrwx 1 root root 14 Apr 19 14:11 enclave -> ../sgx_enclave
lrwxrwxrwx 1 root root 16 Apr 19 14:11 provision -> ../sgx_provision

 

Is it even possible to use the DCAP example if I am not able to use the DCAP driver?

Since I am on kernel 5.16 I have in-kernel support and installing the DCAP driver results in the following error:

"Can't install DCAP SGX driver with in-kernel SGX support”

0 Kudos
JesusG_Intel
Moderator
2,024 Views

Hello ChrisCode,


The in-kernel SGX driver supports DCAP so you do not have to install a separate DCAP driver.


Since you are likely using an insecure certificate for your PCCS service set “use_secure_cert”: false in /etc/sgx_default_qcnl.conf:

 // To accept insecure HTTPS certificate, set this option to false

 "use_secure_cert": false,


Regards,

Jesus G.

Intel Customer Support


KFPW_Intel
Moderator
1,966 Views

Hi ChrisCode,


I hope the information we provided was helpful to you. Do you need further help with this issue?

 

Please inform us if you have any questions. Thank you.

 

Regards,

Ken


0 Kudos
ChrisCode
Novice
1,949 Views

Sorry, I forgot to close the issue. 

The problem was, that there were still some dependencies of my previous OOT driver installation.

After I removed everything, it worked.  

Thanks for you help!

0 Kudos
laduiw
Beginner
1,285 Views

Sorry, I met the same problem, can you give me a more detailed solution to this problem and what packages do you remove?Thanks

0 Kudos
KFPW_Intel
Moderator
1,913 Views

Hi ChrisCode,


Thank you for the confirmation that everything is working on your side.

This thread has been marked as answered and Intel will no longer monitor this thread. If you want a response from Intel in a follow-up question, please open a new thread.

 

Regards,

Ken


0 Kudos
Reply