Intel® Software Guard Extensions (Intel® SGX)
Discussion board focused on hardware-based isolation and memory encryption to provide extended code protection in solutions.
1540 Обсуждение

Unable to run in Hardware mode. Error Message "failed to load enclave."

Guba
Начинающий
4 518Просмотр.

Hello,

after installing Intel SGX Driver (https://github.com/intel/linux-sgx-driver), PSW (incl launch, EPID-based attestation and algorithmic attestation package) and SDK, when trying to run the Sample Code in Hardware mode I receive the message "failed to load enclave."
When running the Sample Code in Simulation Mode I have no such problem.

Intel SGX is set on enabled in Bios and I have already tried to un- and reinstall all packages, but still no change.

I'm running on Ubuntu 18.04.

Thank you very much in advance for your help!

0 баллов
1 Решение
JesusG_Intel
Модератор
4 485Просмотр.

Hello Guba,


Yes, that is a problem because your SGX driver is not loaded. Try running these commands:


$ sudo /sbin/depmod

$ sudo /sbin/modprobe isgx


If you get an error, that means the SGX driver was not correctly installed.


The easiest way to install the driver is to:


  1. Download the desired SGX driver from here: https://download.01.org/intel-sgx/latest/linux-latest/distro/ubuntu18.04-server/ [driver_2.6.0_b0a445.bin is the regular SGX driver; driver_1.36.bin is the DCAP driver]
  2. Execute the bin file: sudo ./sgx_linux_x64_driver_2.6.0_b0a445b.bin
  3. You should see a, "Installation is successful!" message.
  4. Confirm by running: ls /dev | grep sgx

Просмотреть решение в исходном сообщении

9 Ответы
JesusG_Intel
Модератор
4 513Просмотр.

Hello Guba,


Please clarify whether you are running hardware release mode or hardware debug mode. Make sure the aesmd service is running:


Start the aesmd service:

$ ps aux | grep -i aesm

$ sudo systemctl start aesmd

$ cat /var/log/syslog | grep -i aesm


Guba
Начинающий
4 498Просмотр.

Hello Jesus G,

the aesmd service is running. I used your command but no change.

I have both tried to run in hardware release (make SGX_DEBUG=0) as well as hardware debug (make) mode. Both ways I get "failed to load enclave.".

 

 

Guba
Начинающий
4 495Просмотр.

I just checked my /dev/ path and realized there is no /dev/isgx or /dev/sgx path. Could this be part of the issue?

JesusG_Intel
Модератор
4 486Просмотр.

Hello Guba,


Yes, that is a problem because your SGX driver is not loaded. Try running these commands:


$ sudo /sbin/depmod

$ sudo /sbin/modprobe isgx


If you get an error, that means the SGX driver was not correctly installed.


The easiest way to install the driver is to:


  1. Download the desired SGX driver from here: https://download.01.org/intel-sgx/latest/linux-latest/distro/ubuntu18.04-server/ [driver_2.6.0_b0a445.bin is the regular SGX driver; driver_1.36.bin is the DCAP driver]
  2. Execute the bin file: sudo ./sgx_linux_x64_driver_2.6.0_b0a445b.bin
  3. You should see a, "Installation is successful!" message.
  4. Confirm by running: ls /dev | grep sgx

Aaron-Sun
Начинающий
3 935Просмотр.

after run following commands, i did not get any error, but I still not find sgx in /dev

$ sudo /sbin/depmod

$ sudo /sbin/modprobe isgx

 

I installed regular driver and DCAP driver both and all successed. I'm running on CentOS 8.2.

JesusG_Intel
Модератор
4 465Просмотр.

Hello Guba,


Do you still need help with this issue?


Guba
Начинающий
4 462Просмотр.

Excuse my late reply. It was indeed an issue with the driver. Thank you a lot for you help!

Guba
Начинающий
4 460Просмотр.

I thus to completey reinstall the driver using the file from the link

JesusG_Intel
Модератор
4 445Просмотр.

This thread has been marked as answered and Intel will no longer monitor this thread. If you want a response from Intel in a follow-up question, please open a new thread.


Ответить