Intel® Software Guard Extensions (Intel® SGX)
Discussion board focused on hardware-based isolation and memory encryption to provide extended code protection in solutions.

Enclave.config.xml

littleQ
초급자
2,175 조회수

Hello! Recently, I used WAMR. I changed Enclave.config.xml,and got some error.

First, the original Enclave.config.xml is as follows:

<!-- Please refer to User's Guide for the explanation of each field -->
<EnclaveConfiguration>
  <ProdID>0</ProdID>
  <ISVSVN>0</ISVSVN>
  <StackMaxSize>0x100000</StackMaxSize>
  <HeapMaxSize>0x8000000</HeapMaxSize>
  <ReservedMemMaxSize>0x1000000</ReservedMemMaxSize>
  <ReservedMemExecutable>1</ReservedMemExecutable>
  <TCSNum>10</TCSNum>
  <TCSPolicy>1</TCSPolicy>
  <DisableDebug>0</DisableDebug>
  <MiscSelect>0</MiscSelect>
  <MiscMask>0xFFFFFFFF</MiscMask>
</EnclaveConfiguration>

I tried these behavious:

  1. I didn't modify the Enclave.config.xml, and used command make SGX_PRERELEASE=1 SGX_DEBUG=0 SGX_MODE=HW. The result is no error.
  2. I only modified MiscSelect option to 1, and used command make SGX_PRERELEASE=1 SGX_DEBUG=0 SGX_MODE=HW. The result is as follows:
Failed to create enclave from enclave.signed.so, error code: 1
Fail to initialize enclave.

The sgxsdk I used is the version of 2.19. I run the Cxx11SGXDemo in the linux-sgx. I only modified MiscSelect option to 1, and used command make SGX_PRERELEASE=1 SGX_DEBUG=0 SGX_MODE=HW. The result is no error.
Does it mean that WAMR doesn't support SGX2?

0 포인트
5 응답
Wan_Intel
중재자
2,145 조회수

Hello LittleQ,

Thanks for reaching out to us.

May I know what Operating System and Kernel version are you using on your machine?

You may check with uname -r command and lsb_release -a command.



Regards,

Wan


0 포인트
littleQ
초급자
2,133 조회수

My kernel version is: 6.1.31-060131-generic.

Distributor ID: Ubuntu
Description: Ubuntu 22.04.2 LTS
Release: 22.04
Codename: jammy

0 포인트
Wan_Intel
중재자
2,090 조회수

Hello LittleQ,

Thanks for your information.

Let me check with relevant team and I'll update you at the earliest.



Regards,

Wan


0 포인트
Wan_Intel
중재자
2,018 조회수

Hello LittleQ,

Thanks for your patience.

We've received feedback from the relevant team.


Could you please try the following steps and see if the issue can be resolved?

  • Run the following command in your terminal

cpuid | grep SGX2

  • Build the kernel that allows EDMM with the following GitHub page:

https://github.com/intel/sgx-emm



Regards,

Wan


0 포인트
Wan_Intel
중재자
1,932 조회수

Hello LittleQ,

Thanks for your question.

If you need additional information from Intel, please submit a new question as this thread will no longer be monitored.



Regards,

Wan


0 포인트
응답