Number of Available Memory Encryption Engine for Multi Cores Single Server

[Sean_]

Hi,

I wonder for single server with multi cpus and logical cores, if there are ONLY ONE memory encryption engine hardware on the server?

In that case, if I run multiple enclaves on the same server, the programs of the many enclaves need to wait for the recourse of the ONLY memory encryption engine hardware to do address translation, decryption, etc?

For a multi-cpu and multi-core server, does it have SGX hardware on each chip, or all cpus share a only one SGX hardware?

Thank you very much.

Best,

-Sean.

[Wan_Intel]

Hello Sean_,

Thanks for reaching out to us.

Let me check with relevant team and I'll update here at the earliest.

Regards,

Wam

[Wan_Intel · Accepted solution]

Hello Sean_,

Thanks for your patience.

We've received feedback from relevant team.

For a multi-cpu, multi-core server, each CPU has its own set of hardware resources. i.e. each CPU would have its own SGX hardware including the memory encryption engine (MEE).

SGX is designed to provide enclave-based security for each core so that enclaves are secure even in a multi-CPU multi-core environment. So the resources are not shared among the CPUs.

Regards,

Wan

[Sean_]

Hello Wan,

Thanks for your reply!

One last thing to comfirm --- does your answer also applies for Azure Virtual Machine (e.g., DC8ds_v3)? I.e., Each vCPU of DC8ds_v3 has its own set of SGX Intel Hardware?

Best,

-Xian

[Sean_]

I just find that here is Intel SGX community... I am sorry. Wan, thanks for your previous answer!

[Wan_Intel]

Hello Sean_,

Thanks for your question.

If you need additional information from Intel, please submit a new question as this thread will no longer be monitored.

Regards,

Wan