Intel® Software Guard Extensions (Intel® SGX)
Discussion board focused on hardware-based isolation and memory encryption to provide extended code protection in solutions.
1540 讨论

Unable to run in Hardware mode. Error Message "failed to load enclave."

Guba
初学者
4,530 次查看

Hello,

after installing Intel SGX Driver (https://github.com/intel/linux-sgx-driver), PSW (incl launch, EPID-based attestation and algorithmic attestation package) and SDK, when trying to run the Sample Code in Hardware mode I receive the message "failed to load enclave."
When running the Sample Code in Simulation Mode I have no such problem.

Intel SGX is set on enabled in Bios and I have already tried to un- and reinstall all packages, but still no change.

I'm running on Ubuntu 18.04.

Thank you very much in advance for your help!

0 项奖励
1 解答
JesusG_Intel
主持人
4,497 次查看

Hello Guba,


Yes, that is a problem because your SGX driver is not loaded. Try running these commands:


$ sudo /sbin/depmod

$ sudo /sbin/modprobe isgx


If you get an error, that means the SGX driver was not correctly installed.


The easiest way to install the driver is to:


  1. Download the desired SGX driver from here: https://download.01.org/intel-sgx/latest/linux-latest/distro/ubuntu18.04-server/ [driver_2.6.0_b0a445.bin is the regular SGX driver; driver_1.36.bin is the DCAP driver]
  2. Execute the bin file: sudo ./sgx_linux_x64_driver_2.6.0_b0a445b.bin
  3. You should see a, "Installation is successful!" message.
  4. Confirm by running: ls /dev | grep sgx

在原帖中查看解决方案

0 项奖励
9 回复数
JesusG_Intel
主持人
4,525 次查看

Hello Guba,


Please clarify whether you are running hardware release mode or hardware debug mode. Make sure the aesmd service is running:


Start the aesmd service:

$ ps aux | grep -i aesm

$ sudo systemctl start aesmd

$ cat /var/log/syslog | grep -i aesm


0 项奖励
Guba
初学者
4,510 次查看

Hello Jesus G,

the aesmd service is running. I used your command but no change.

I have both tried to run in hardware release (make SGX_DEBUG=0) as well as hardware debug (make) mode. Both ways I get "failed to load enclave.".

 

 

0 项奖励
Guba
初学者
4,507 次查看

I just checked my /dev/ path and realized there is no /dev/isgx or /dev/sgx path. Could this be part of the issue?

0 项奖励
JesusG_Intel
主持人
4,498 次查看

Hello Guba,


Yes, that is a problem because your SGX driver is not loaded. Try running these commands:


$ sudo /sbin/depmod

$ sudo /sbin/modprobe isgx


If you get an error, that means the SGX driver was not correctly installed.


The easiest way to install the driver is to:


  1. Download the desired SGX driver from here: https://download.01.org/intel-sgx/latest/linux-latest/distro/ubuntu18.04-server/ [driver_2.6.0_b0a445.bin is the regular SGX driver; driver_1.36.bin is the DCAP driver]
  2. Execute the bin file: sudo ./sgx_linux_x64_driver_2.6.0_b0a445b.bin
  3. You should see a, "Installation is successful!" message.
  4. Confirm by running: ls /dev | grep sgx

0 项奖励
Aaron-Sun
初学者
3,947 次查看

after run following commands, i did not get any error, but I still not find sgx in /dev

$ sudo /sbin/depmod

$ sudo /sbin/modprobe isgx

 

I installed regular driver and DCAP driver both and all successed. I'm running on CentOS 8.2.

0 项奖励
JesusG_Intel
主持人
4,477 次查看

Hello Guba,


Do you still need help with this issue?


0 项奖励
Guba
初学者
4,474 次查看

Excuse my late reply. It was indeed an issue with the driver. Thank you a lot for you help!

0 项奖励
Guba
初学者
4,472 次查看

I thus to completey reinstall the driver using the file from the link

0 项奖励
JesusG_Intel
主持人
4,457 次查看

This thread has been marked as answered and Intel will no longer monitor this thread. If you want a response from Intel in a follow-up question, please open a new thread.


0 项奖励
回复