Community
cancel
Showing results for 
Search instead for 
Did you mean: 
mzaman
Novice
400 Views

Re: problem in running https://github.com/intel/sgx-ra-sample

Jump to solution

It would be really helpful if you please elaborate the solution. I am facing the same problem.

0 Kudos

Accepted Solutions
JesusG_Intel
Moderator
264 Views

Hello Mzaman,


Let's try properly installing libsgx-uae-service:


$ sudo apt-get install libsgx-uae-service


Sincerely,

Jesus G.

Intel Customer Support


View solution in original post

11 Replies
JesusG_Intel
Moderator
374 Views

Hello mzaman,

 

Install the SGX SDK for Linux and the Intel SGX Platform Software (PSW) according to the instructions in the Intel SGX Installation Guide for Linux.

 

The file libsgx_uae_service.so is in sgxsdk/lib64. Add this path to the environment variable LD_LIBRARY_PATH using one of two methods:

 

$ source sgxsdk/environment (preferred so that all of your paths are set correctly)

or

$ export LD_LIBRARY_PATH=sgxsdk/lib64:$LD_LIBRARY_PATH

 

Sincerely,

Jesus G.

Intel Customer Support

 

mzaman
Novice
360 Views

Hi Jesus,

Thanks for replying. I follow all the steps.

  1.  Installed SGX driver (not DCAP), SGX-SDK, SGX-PSW (deb)
  2.  For aesm service I kept the proxy type default. So my aesmd.conf file is looked like:
  3.         #proxy type = direct #direct type means no proxy used
             proxy type = default #system default proxy
            #proxy type = manual #aesm proxy should be specified for manual proxy type
            #aesm proxy = http://proxy_url:proxy_port
            #whitelist url = http://sample_while_list_url/
            #default quoting type = ecdsa_256
            #default quoting type = epid_linkable
            #default quoting type = epid_unlinkable
  4. My sgxsdk and sgx-aesm-service installed in /opt/intel. So I set the path as you said [source /opt/intel/sgxsdk/environment]
  5. Moreover all the sample code in sgxsdk is running properly
  6. For sgx-ra-sample I am still facing the same problem (This system does not support Intel SGX.) when running ./run-client

 If you please me direct me what else I can do it would be helpful.

Thanks,

Mzaman

JesusG_Intel
Moderator
344 Views

Hello Mzaman,

Send a screenshot of the output from:

ls /usr/lib/x86_64-linux-gnu/libsgx_*

 

It should look similar to the below. I installed all of the PSW components.

JesusG_Intel_0-1610747480474.png

 

 

mzaman
Novice
340 Views

Hi Jesus,

Thanks for reply. Here is the screenshot

Screenshot from 2021-01-15 17-04-00.png

Thanks,

Mzaman

mzaman
Novice
331 Views

Hi,

I have two updates

  1. I think client side is now working. I need to make again on the client side (my bad).
  2. Now in client side showing 'Please use the correct SGX EPID library from PSW package.' Here is the screen shot of client and servercl.pngser.png

Thanks,

Mzaman

JesusG_Intel
Moderator
322 Views

Hello Mzaman,


I think I figured it out. We should not have added the path sgxsdk/lib64 to the LD_LIBRARY_PATH. Do not source sgxsdk/environment. Remove it using:


$ export MY_PATH=/opt/intel/sgxsdk/lib64

$ export LD_LIBRARY_PATH="${LD_LIBRARY_PATH/${MY_PATH}:/}"


Copy libsgx_uae_service.so from sgxsdk/lib64 to /usr/lib/x86_64-linux-gnu/

sudo cp ../sgxsdk/lib64/libsgx_uae_service.so /usr/lib/x86_64-linux-gnu/


make clean && make

./run-client



mzaman
Novice
290 Views

Hi Jesus,

Thanks for your reply. I remove the path and copy the libsgx_uae_service.so, still it's showing the same message Please use the correct SGX EPID library from PSW package. Can you please direct us  what I am doing wrong?

Regards,

Mzaman

JesusG_Intel
Moderator
265 Views

Hello Mzaman,


Let's try properly installing libsgx-uae-service:


$ sudo apt-get install libsgx-uae-service


Sincerely,

Jesus G.

Intel Customer Support


View solution in original post

mzaman
Novice
259 Views

Hello Jesus,

Thanks for your reply. Now I am getting the following output from the client side:

---- Enclave Trust Status from Service Provider ----------------------------
Enclave Trust is NOT TRUSTED and COMPLICATED. The client is out of date.
----------------------------------------------------------------------------

---- Platform Update Required ----------------------------------------------
The following Platform Update(s) are required to bring this
platform's Trusted Computing Base (TCB) back into compliance:

* The CPU Microcode needs to be updated. Contact your OEM for a platform
BIOS Update.

----------------------------------------------------------------------------

Should I update my BIOS? Thanks again for your help.

Regards,

Mzaman

JesusG_Intel
Moderator
257 Views

Hello Mzaman,


It works!


Yes, you should get the latest BIOS from your OEM. Note that the latest BIOS may not have all of the necessary mitigations so you may still get Security Advisory reports from IAS.


Let's close this thread since your initial problem is resolved. Please open a new thread for follow-up questions.


Sincerely,

Jesus G.

Intel Customer Support


mzaman
Novice
240 Views

Hi Jesus,

You are right. I am running the code with the updated bios still showing some IAS advisories. Thanks for helping to solve the problem.

We can close this thread.

Regards,

Mzaman