Intel® Software Guard Extensions (Intel® SGX)
Discussion board focused on hardware-based isolation and memory encryption to provide extended code protection in solutions.

Enclave Trust is NOT TRUSTED

Majewski__John
Beginner
2,335 Views

I built the sgx-ra-sample on Win10, VS2015 pro, i9900k.  I believe the SP server is configured properly with a linkable subscription.  The result of running the client is:

---- Enclave Trust Status from Service Provider ----------------------------
Aug 12 2019 13:57:42 Enclave Trust is NOT TRUSTED and COMPLICATED. The client is out of date.
Aug 12 2019 13:57:42 A Platform Info Blob (PIB) was provided by the IAS
Aug 12 2019 13:57:42 +++ PIB:  xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx [x's inserted to mask pib]
Aug 12 2019 13:57:42 +++ sgx_report_attestation_status ret = 0x0000

 

Has anybody run into this problem?  Thanks in advance!

0 Kudos
1 Solution
9 Replies
Anandakumar
New Contributor II
2,335 Views

Hi all! 

came here to post a similar issue!

I have built and installed PSW and SDK from current master branch.

Getting the following result after successfull Remote Attestation,

---- Enclave Trust Status from Service Provider ----------------------------
Enclave Trust is NOT TRUSTED and COMPLICATED. The client is out of date.
----------------------------------------------------------------------------

---- Platform Update Required ----------------------------------------------
The following Platform Update(s) are required to bring this
platform's Trusted Computing Base (TCB) back into compliance:

  * Intel SGX Platform Software needs to be updated to the latest version.
  * The CPU Microcode needs to be updated.  Contact your OEM for a platform
    BIOS Update.

 Though i have built PSW from latest branch , it ask for PSW update. any reason for this?

 What exactly needed to be done for CPU Micro code & BIOS update?

Thanks!

 

 

 

 

 

 

0 Kudos
Anandakumar
New Contributor II
2,335 Views

update :

 Im using Dell Latitude E7470 and Cent OS 7.6, and i did upadted my system BIOS to latest version 1.21.6.

Still im getting the same result. 

Natarajan, Anandakumar wrote:

Hi all! 

came here to post a similar issue!

I have built and installed PSW and SDK from current master branch.

Getting the following result after successfull Remote Attestation,

---- Enclave Trust Status from Service Provider ----------------------------
Enclave Trust is NOT TRUSTED and COMPLICATED. The client is out of date.
----------------------------------------------------------------------------

---- Platform Update Required ----------------------------------------------
The following Platform Update(s) are required to bring this
platform's Trusted Computing Base (TCB) back into compliance:

  * Intel SGX Platform Software needs to be updated to the latest version.
  * The CPU Microcode needs to be updated.  Contact your OEM for a platform
    BIOS Update.

 Though i have built PSW from latest branch , it ask for PSW update. any reason for this?

 What exactly needed to be done for CPU Micro code & BIOS update?

Thanks!

 

 

 

 

 

 

0 Kudos
Spisak-Spisacki__Krz
2,335 Views

Same problem with Ubuntu 18.10 on Lenovo X270. Though I have not updated my BIOS yet and I've assumed it would do the trick. If that's not the case, I'm also interested in the solution.

0 Kudos
Majewski__John
Beginner
2,335 Views

I just reran the sgx-ra-sample on a new machine, a Dell XPS 13 with Win10 and Skylake processor.  I received a different result saying something to the effect of 'your system is out of date'.  After updating the BIOS to the latest release, I received the same response as on my i9-9900k processor:

---- Enclave Trust Status from Service Provider ----------------------------
Enclave Trust is NOT TRUSTED and COMPLICATED. The client is out of date.
A Platform Info Blob (PIB) was provided by the IAS
+++ PIB: xxxxxxxxxxx [pib redacted for this post]
+++ sgx_report_attestation_status ret = 0x0000

 

It sounds like a few of us are having the same issue.  Is there a way to open a support ticket with Intel?

0 Kudos
Anandakumar
New Contributor II
2,335 Views

Anyone has any updates on this issue!?

0 Kudos
Spisak-Spisacki__Krz
2,335 Views

@John I believe that creating ticket in https://github.com/intel/sgx-ra-sample/issues and/or shooting an e-mail to john.p.mechalas@intel.com (I believe he's the project maintainer) might increase your chances of getting a response from Intel.

0 Kudos
JohnMechalas
Employee
2,335 Views

Reporting issues with the sample on GitHub is best as someone will see it even if I am sick, out of the office, etc.

We're looking into this issue.

0 Kudos
Dan_Zimmerman
Employee
2,336 Views
0 Kudos
Majewski__John
Beginner
2,335 Views

Thanks everyone

0 Kudos
Reply