- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
introduce:
ubuntu 20.04 ,5.15.0-101-generic
install sgx_linux_x64_sdk_2.26.100.0.bin
dcap 1.22, Retrieval Tool Version 1.22.100.3
now begin
first, pccs sever is running on docker, i build a pccs image to run it:
pccs is offline mode
second, i use the PCKIDRetrievalTool_v1.22.100.3, log as follows:
then, I use PccsAdminTool on my own computer to export platform information
finally,I use the generated platform_list.json to request https://api.trustedservices.intel.com/sgx/certification/v4/ to obtain PCK certs,
Why did this situation occur?
The information that can be known more intuitively is that the csv file generated by PCKIDRetrievalTool does not contain platform_manifest information
Link Copied
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello,
In your second screenshot, you see the message "Warning: platform manifest is not available or current platform is not multi-package platform.". This leads exactly what you say: the CSV does not contain the platform manifest and as a result, you cannot register the machine.
Please try an "SGX Factory Reset" in the BIOS, which will lead to the availability of a new platform manifest. Note that this will generate new platform keys, which makes it impossible to unseal everything that you might have sealed before.
You can read more about registration in our TDX Enabling Guide (SGX is currently a requirement for TDX attestation): Infrastructure Setup - Intel® TDX Enabling Guide
If you still face issues with registration afterwards, please run the troubleshooting steps in the TDX Enabling Guide and provide the results.
Best regards,
Benny
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thank you very much. I have already solved this issue. It was because the UEFI mode was not selected in the BIOS panel for the boot entry. I also discovered this after consulting the relevant DCAP documentation. The information is described in great detail : https://download.01.org/intel-sgx/sgx-dcap/1.9/linux/docs/Intel_SGX_DCAP_Multipackage_SW.pdf
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page