Intel® SGX / Intel® TDX Services Impacts of Changes in Servicing Updates for Select Intel® Processor

[Scott_R_Intel]

Intel provides regular updates regarding changes in customer support and servicing updates for select Intel® Processors through our  Support Knowledge Base. In particular, the End of Servicing Updates (ESU Date) and the End of Servicing Lifetime Date (EOSL Date) of the individual products.

This post is to explain the expected behavior of the Intel Provisioning Certification Service (Intel PCS) based on these dates. The TCB Info structures returned by Intel PCS will contain specific Advisory IDs when one of these dates is reached for a product and a Trusted Computing Base Recovery (TCB-R) occurs afterwards:

• At the next TCB-R following the ESU Date of the product, the corresponding TCB Info will contain a new Advisory ID (INTEL-DOC-10000)**. For further details, reference the “Advisory IDs Explained” section below.
• At the next TCB-R following the EOSL Date of the product, the corresponding TCB Info will contain a new Advisory ID (INTEL-DOC-10001)**. For further details, reference the “Advisory IDs Explained” section below.

**Note that this statement assumes either: 1) that the parameter [update] is used and set to “The content of the TCB Info structure returned by the Provisioning Certification Service can vary based on which input parameters (such as [update], [tcbEvaluationDataNumber]) and values for those input parameters are specified in the request. See more details about alternatives for parameters and the logic governing them in the Services documentation.

Advisory IDs Explained:

The TCB Info structure can return an array of Advisory IDs which refer to the advisories that provide insight into the reason(s) for the value of tcbStatus for a particular TCB level (when the value is not UpToDate).  The field is not present when there are no Advisory IDs.

Advisory IDs are strings in the following formats:

• "INTEL-SA-XXXXX" (where XXXXX is a placeholder for a 5-digit number) - representing Security Advisories that can be searched on the Intel® Product Security Center Advisories page (https://www.intel.com/content/www/us/en/security-center/default.html)
• "INTEL-DOC-XXXXX" (where XXXXX is a placeholder for a 5-digit number) - representing articles containing additional information about the attested platform. The articles can be found under the following URL: https://api.portal.trustedservices.intel.com/documents/{INTEL-DOC-XXXXX}