[Remote attestation] unable to verify quote sig in middleware server (SP)

Intel® Software Guard Extensions (Intel® SGX)

Discussion board focused on hardware-based isolation and memory encryption to provide extended code protection in solutions.

[Remote attestation] unable to verify quote sig in middleware server (SP)

437 Views

I'm getting the following logs from the intel middleware server:

Attestation server sent invalid signature - IAS is not authentic. Exiting...

CheckValidQuoteSignature(.) returning False.
Nonce is valid - IAS is authentic.

ProcessEPIDPseudonym(.) returning.
******* IAS is invalid!!! Bad signature or nonce
*****IAS Status Code: 7

This is for a production enclave, I have configured it to use the production SPID, IAS endpoint. My RKMod is the mod of the pubkey in https://software.intel.com/en-us/sgx-sdk/download. I'm not sure if that requires configuring if so to what. Thanks in advance.

Link Copied

0 Replies

Community support is provided Monday to Friday. Other contact methods are available here.

Intel does not verify all solutions, including but not limited to any file transfers that may appear in this community. Accordingly, Intel disclaims all express and implied warranties, including without limitation, the implied warranties of merchantability, fitness for a particular purpose, and non-infringement, as well as any warranty arising from course of performance, course of dealing, or usage in trade.

For more complete information about compiler optimizations, see our Optimization Notice.