SGX XFRM support?

[littleQ]

hello. I want to run sgx using enarx. But when I run sudo enarx platform info, it shows that:

✗ Backend: sgx

✔ Driver: /dev/sgx_enclave

✔ CPU: Intel(R) Xeon(R) Silver 4410Y | GenuineIntel

✔ SGX Support

✔ Version 1

✔ Version 2

✔ FLC Support

✔ Max Size (32-bit): 2 GiB

✔ Max Size (64-bit): 64 PiB

✔ MiscSelect: EXINFO

✔ Features: DEBUG | MODE64BIT | PROVISIONING_KEY | EINIT_KEY | KSS

✗ Xfrm

✔ EPC Size: 4 GiB

✔ Intel CRL cache

✔ AESM Daemon Socket: /var/run/aesmd/aesm.socket.

Then I wonder how to enable Xfrm?

My CPU is Intel(R) Xeon(R) Silver 4410Y.

[Aznie_Intel]

Hi LittleQ,

That XFRM setting can be changed by the hypervisor in the ATTRIBUTES for the VM. We would suggest you check with VM or Enarx Github for further support.

Additionally, you may follow the Enarx setup for SGX and please ensure the Linux kernel with patches was applied from this specific tree reference: https://enarx.dev/docs/install

Regards,

Aznie

[Aznie_Intel]

Hi LittleQ,

This thread will no longer be monitored since we have provided information. If you need any additional information from Intel, please submit a new question. 

Regards,

Aznie