Intel® Software Guard Extensions (Intel® SGX)
Use hardware-based isolation and memory encryption to provide more code protection in your solutions.
1334 Discussions

Failed to run call sgx_ra_get_msg1_ex in SGXSDK REMOTEAttestation on Ubuntu 18.04.

MelonMan
Beginner
547 Views

Below is last few lines output of running `./app` Below REMOTEAttestation folder

```

Call sgx_select_att_key_id success.
Call sgx_create_enclave success.
Call enclave_init_ra success.
Error, call sgx_ra_get_msg1_ex fail [main].
Call enclave_ra_close success.
Enter a character before exit ...

```

While run all other test  can have correct results...

My System and sgx components info show below:

SgxDriver:

OOT Driver 2.11.0_2d2b795

SgxSdk Ver:

2.15.101.1.bin

OS system Info:

Linux version 5.4.0-90-generic (buildd@lcy01-amd64-026) (gcc version 7.5.0 (Ubuntu 7.5.0-3ubuntu1~18.04)) #101~18.04.1-Ubuntu SMP Fri Oct 22 09:25:04 UTC 2021

dmesg | grep sgx output:

dmesg.png

Any help is much appreciated.

 

0 Kudos
4 Replies
MelonMan
Beginner
541 Views

It may be the network problem....

As the RemoteAttestation epid algorithm may include the communication between IAS.

Bad Network Quality can results in error....

JesusG_Intel
Moderator
515 Views

Hello MelonMan,

 

It seems that you may be having an SGX driver conflict as your dmesg output shows messages from both the regular OOT driver, isgx, and the DCAP driver, intel_sgx.

 

Did you try installing both drivers?

 

If so, uninstall the DCAP driver with:

 

$ sudo service aesmd stop

$ sudo rm -f $(find /lib/modules -name intel_sgx.ko)

$ sudo /sbin/depmod

$ sudo sed -i '/^intel_sgx$/d' /etc/modules

$ sudo rm -f /etc/sysconfig/modules/intel_sgx.modules

$ sudo rm -f /etc/modules-load.d/intel_sgx.conf

 

 

Install of the PSW components with:

 

$ sudo apt-get install libsgx-launch libsgx-urts libsgx-epid libsgx-quote-ex libsgx-uae-service

 

Start the AESM service

$ sudo service aesmd start


JesusG_Intel
Moderator
466 Views

Hello MelonMan,


Do you still need help with this issue?


Sincerely,

Jesus G.

Intel Customer Support


JesusG_Intel
Moderator
441 Views

Hello MelonMan,


We have not heard from you in several days so we will no longer monitor this thread. We hope you were able to resolve your issue. Please start a new thread if you need further help.


Sincerely,

Jesus G.

Intel Customer Support


Reply