Intel® Software Guard Extensions (Intel® SGX)
Use hardware-based isolation and memory encryption to provide more code protection in your solutions.

SGX launch enclave

gu_j_1
Beginner
671 Views

Hi, 

How does SGX windows SDK launch an enclave?

I think it will first launch the Launch Enclave with le.signed.dll, and then use this Launch Enclave to launch other enclaves. Is this right?

When I use sgx_create_enclave interface with le.signed.dll, the return value(error number) is 0x2001. So, how to launch the Launch Enclave?

Thanks in advance!

0 Kudos
1 Solution
Surenthar_S_Intel
671 Views

Update:

Intel SGX SDK for Linux* OS open source project is now live at:  https://01.org/intel-softwareguard-eXtensions

View solution in original post

6 Replies
DanZimmerman_Intel
671 Views

Hi Gu,

There is no need to load the launch enclave directly.  The SGX Platform Software (PSW) handles that for you when the "Intel SGX AESM" service loads during Windows boot.  If you are having trouble loading your built enclave with sgx_create_enclave(), check that you have installed the PSW  and the "Intel SGX AESM" service is running.  

cheers,

Dan

gu_j_1
Beginner
671 Views

Hi Dan,

Do you mean that the launch enclave is alive from windows' start up to shutdown?

Can I do some ecalls to it? That's to say, how to know it's enclave id and how to know it's interface.

I am very interesting about it. Thanks a lot!

Derek_B_Intel
Employee
671 Views

Hi Gu,

As Dan mentioned the Intel SGX AESM service is started during Windows boot and should persist until shutdown.

The "Untrusted Library Functions" and "Trusted Libraries - > Platform Services Functions" sections of the SDK Users Guide include the public interface functions supported by the AESM service.

In addition, the Sample Applications demonstrate the use of these services.  

 

Pete_M_
Beginner
671 Views

Dan and Derek,  are you aware of how developers can handle the Launch Enclave in Linux?

Surenthar_S_Intel
671 Views

Currently, there is no publicly available version of a SGX SDK for Linux.  Stay tuned for more information coming in late Q2/Q3 timeframe.

Surenthar_S_Intel
672 Views

Update:

Intel SGX SDK for Linux* OS open source project is now live at:  https://01.org/intel-softwareguard-eXtensions

Reply