Intel® Software Guard Extensions (Intel® SGX)
Discussion board focused on hardware-based isolation and memory encryption to provide extended code protection in solutions.

Linux RemoteAttestation Sample code Failed

Changzheng_W_Intel
1,156 Views

Hi

I build linux RemoteAttestation Sample code on a SGX enabled PC with cmd

make SGX_MODE=HW SGX_DEBUG=1

and run ./app, got the error outpur as below:

root@qat-sgx-pc:/opt/intel/sgxsdk/SampleCode/RemoteAttestation# ./app

Call sgx_create_enclave success.
Call enclave_init_ra success.
Error, call sgx_ra_get_msg1 fail [main].
Call enclave_ra_close success.
Enter a character before exit ...


I also ran other Sample code in SDK, such as SampleEnclave and LocalAttestation in HW mode, they are all OK.

My OS is ubuntu 14.04, and my network is Intel internal network.

If I configure the network proxy, it will hang at "Call sgx_create_enclave success." for a while then failed with above message.

If I disable the network proxy, it will immediately fail with above message.

Is there any configuration related to network for this RemoteAttestation sample code?

 

Thanks

0 Kudos
1 Solution
Changzheng_W_Intel
1,156 Views

Fixed.

EPID Provisioning needs network access. Setting proxy in /etc/aesmd.conf as:

proxy type = manual

aesm proxy = proxy.host:port

Then restart aesmd service using "service aesmd restart"

By the way, the SGX (driver/psw/sdk) need to be upgraded to the latest 1.6 release (I used version 1.5 at the beginning and then get SGX_ERROR_UPDATE_NEEDED error), then the sample code works well

View solution in original post

0 Kudos
2 Replies
Changzheng_W_Intel
1,157 Views

Fixed.

EPID Provisioning needs network access. Setting proxy in /etc/aesmd.conf as:

proxy type = manual

aesm proxy = proxy.host:port

Then restart aesmd service using "service aesmd restart"

By the way, the SGX (driver/psw/sdk) need to be upgraded to the latest 1.6 release (I used version 1.5 at the beginning and then get SGX_ERROR_UPDATE_NEEDED error), then the sample code works well

0 Kudos
sz
Beginner
981 Views

Hi,Changzheng_W_Intel.

How can i set the proxy value?

and 

Does the value is the EPID Provisioning service Host?

thanks ~

0 Kudos
Reply