Intel® Software Guard Extensions (Intel® SGX)
Discussion board focused on hardware-based isolation and memory encryption to provide extended code protection in solutions.

SGX XFRM support?

littleQ
Beginner
535 Views
hello. I want to run sgx using enarx. But when I run sudo enarx platform info, it shows that:
 Backend: sgx
 Driver: /dev/sgx_enclave
 CPU: Intel(R) Xeon(R) Silver 4410Y | GenuineIntel
 SGX Support
 Version 1
 Version 2
 FLC Support
 Max Size (32-bit): 2 GiB
 Max Size (64-bit): 64 PiB
 MiscSelect: EXINFO
 Features: DEBUG | MODE64BIT | PROVISIONING_KEY | EINIT_KEY | KSS
 Xfrm
 EPC Size: 4 GiB
 Intel CRL cache
 AESM Daemon Socket: /var/run/aesmd/aesm.socket.
Then I wonder how to enable Xfrm?
My CPU is Intel(R) Xeon(R) Silver 4410Y.
0 Kudos
2 Replies
Aznie_Intel
Moderator
467 Views

Hi LittleQ,

 

That XFRM setting can be changed by the hypervisor in the ATTRIBUTES for the VM. We would suggest you check with VM or Enarx Github for further support.

 

Additionally, you may follow the Enarx setup for SGX and please ensure the Linux kernel with patches was applied from this specific tree reference: https://enarx.dev/docs/install

 

 

Regards,

Aznie


0 Kudos
Aznie_Intel
Moderator
359 Views

Hi LittleQ,


This thread will no longer be monitored since we have provided information. If you need any additional information from Intel, please submit a new question. 



Regards,

Aznie


0 Kudos
Reply