Intel® Software Guard Extensions (Intel® SGX)
Discussion board focused on hardware-based isolation and memory encryption to provide extended code protection in solutions.
1448 Discussions

Unable to run in Hardware mode. Error Message "failed to load enclave."

Guba
Beginner
2,859 Views

Hello,

after installing Intel SGX Driver (https://github.com/intel/linux-sgx-driver), PSW (incl launch, EPID-based attestation and algorithmic attestation package) and SDK, when trying to run the Sample Code in Hardware mode I receive the message "failed to load enclave."
When running the Sample Code in Simulation Mode I have no such problem.

Intel SGX is set on enabled in Bios and I have already tried to un- and reinstall all packages, but still no change.

I'm running on Ubuntu 18.04.

Thank you very much in advance for your help!

0 Kudos
1 Solution
JesusG_Intel
Moderator
2,826 Views

Hello Guba,


Yes, that is a problem because your SGX driver is not loaded. Try running these commands:


$ sudo /sbin/depmod

$ sudo /sbin/modprobe isgx


If you get an error, that means the SGX driver was not correctly installed.


The easiest way to install the driver is to:


  1. Download the desired SGX driver from here: https://download.01.org/intel-sgx/latest/linux-latest/distro/ubuntu18.04-server/ [driver_2.6.0_b0a445.bin is the regular SGX driver; driver_1.36.bin is the DCAP driver]
  2. Execute the bin file: sudo ./sgx_linux_x64_driver_2.6.0_b0a445b.bin
  3. You should see a, "Installation is successful!" message.
  4. Confirm by running: ls /dev | grep sgx

View solution in original post

0 Kudos
9 Replies
JesusG_Intel
Moderator
2,854 Views

Hello Guba,


Please clarify whether you are running hardware release mode or hardware debug mode. Make sure the aesmd service is running:


Start the aesmd service:

$ ps aux | grep -i aesm

$ sudo systemctl start aesmd

$ cat /var/log/syslog | grep -i aesm


0 Kudos
Guba
Beginner
2,839 Views

Hello Jesus G,

the aesmd service is running. I used your command but no change.

I have both tried to run in hardware release (make SGX_DEBUG=0) as well as hardware debug (make) mode. Both ways I get "failed to load enclave.".

 

 

0 Kudos
Guba
Beginner
2,836 Views

I just checked my /dev/ path and realized there is no /dev/isgx or /dev/sgx path. Could this be part of the issue?

0 Kudos
JesusG_Intel
Moderator
2,827 Views

Hello Guba,


Yes, that is a problem because your SGX driver is not loaded. Try running these commands:


$ sudo /sbin/depmod

$ sudo /sbin/modprobe isgx


If you get an error, that means the SGX driver was not correctly installed.


The easiest way to install the driver is to:


  1. Download the desired SGX driver from here: https://download.01.org/intel-sgx/latest/linux-latest/distro/ubuntu18.04-server/ [driver_2.6.0_b0a445.bin is the regular SGX driver; driver_1.36.bin is the DCAP driver]
  2. Execute the bin file: sudo ./sgx_linux_x64_driver_2.6.0_b0a445b.bin
  3. You should see a, "Installation is successful!" message.
  4. Confirm by running: ls /dev | grep sgx

0 Kudos
Aaron-Sun
Beginner
2,276 Views

after run following commands, i did not get any error, but I still not find sgx in /dev

$ sudo /sbin/depmod

$ sudo /sbin/modprobe isgx

 

I installed regular driver and DCAP driver both and all successed. I'm running on CentOS 8.2.

0 Kudos
JesusG_Intel
Moderator
2,806 Views

Hello Guba,


Do you still need help with this issue?


0 Kudos
Guba
Beginner
2,803 Views

Excuse my late reply. It was indeed an issue with the driver. Thank you a lot for you help!

0 Kudos
Guba
Beginner
2,801 Views

I thus to completey reinstall the driver using the file from the link

0 Kudos
JesusG_Intel
Moderator
2,786 Views

This thread has been marked as answered and Intel will no longer monitor this thread. If you want a response from Intel in a follow-up question, please open a new thread.


0 Kudos
Reply