- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi, Intel engineers!
I just got a machine with Intel Core i7-6820HQ CPU which support SGX.
I already get my development environment prepared. And right now I'm playing around with the SGX SDK.
The sample codes shipped with the SDK work well under Debug mood, simulation mood as well as prerelease mood on my machine. While, under the release mood, the default configuration doesn’t create a signed enclave file. So, I created a signed enclave file following the instruction on the SDK user’s guide (using two step signing method).
When I execute the release version enclave application, I get this error:
The return value of the API:
sgx_create_enclave is 0x4004, which corresponds to SGX_ERROR_SERVICE_INVALID_PRIVILEDGE.
So, my real question is: what does this error mean and how should I solve it?
Is there any other operations that must be done to make the release version application work?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
This error is received when an enclave is launched as a production enclave without production licensing support. You can launch your enclave in HW mode when the debug flag is set in the call: sgx_create_enclave. (2nd parameter)
Link Copied
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
The SGX SDK provided is an Evaluation SDK intended for technology evaluation, prototyping and development. Release mode enclaves, or production enclaves, require a production license.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
We have written a blog on differences between debug and production enclaves, and the different compiler profiles. You should be able to go a long using the Evaluation SDK.
See https://software.intel.com/en-us/blogs/2016/01/07/intel-sgx-debug-production-prelease-whats-the-difference
Requests for production licensing need to be sent to sgx_program@intel.com
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi Simon,
Is the error 0x4004 SGX_ERROR_SERVICE_INVALID_PRIVILEDGE due to not having a license? Or is it related to something unrelated to the license?
I am running an SGX program using simulation libraries (by setting them in Linker>input>additional dependencies), the program runs fine. But when I use the HW configuration, the enclave is not created due to 0x4004 error mentioned in the post.
I also would like to mention that I don't meant to hijack the post but I posted here because the it was not answered whether the error 0x4004 is due to not having license.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
This error is received when an enclave is launched as a production enclave without production licensing support. You can launch your enclave in HW mode when the debug flag is set in the call: sgx_create_enclave. (2nd parameter)
![](/skins/images/C4F7392A5C68ACA60290C9576F107044/responsive_peak/images/icon_anonymous_message.png)
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page