To use remote attestation, do both client(thin machine) and server(computations system, 3rd party) needs to be SGX enabled machine? or only the server can be SGX enabled machine. I wanted to provision secret key from client to the server. As server enclave code can be disassembled.
I am planning to use thin clients to talk to the big server.