Intel® Software Guard Extensions (Intel® SGX)
Discussion board focused on hardware-based isolation and memory encryption to provide extended code protection in solutions.
1490 Discussions

Unable to run in Hardware mode. Error Message "failed to load enclave."

Guba
Beginner
3,808 Views

Hello,

after installing Intel SGX Driver (https://github.com/intel/linux-sgx-driver), PSW (incl launch, EPID-based attestation and algorithmic attestation package) and SDK, when trying to run the Sample Code in Hardware mode I receive the message "failed to load enclave."
When running the Sample Code in Simulation Mode I have no such problem.

Intel SGX is set on enabled in Bios and I have already tried to un- and reinstall all packages, but still no change.

I'm running on Ubuntu 18.04.

Thank you very much in advance for your help!

0 Kudos
1 Solution
JesusG_Intel
Moderator
3,775 Views

Hello Guba,


Yes, that is a problem because your SGX driver is not loaded. Try running these commands:


$ sudo /sbin/depmod

$ sudo /sbin/modprobe isgx


If you get an error, that means the SGX driver was not correctly installed.


The easiest way to install the driver is to:


  1. Download the desired SGX driver from here: https://download.01.org/intel-sgx/latest/linux-latest/distro/ubuntu18.04-server/ [driver_2.6.0_b0a445.bin is the regular SGX driver; driver_1.36.bin is the DCAP driver]
  2. Execute the bin file: sudo ./sgx_linux_x64_driver_2.6.0_b0a445b.bin
  3. You should see a, "Installation is successful!" message.
  4. Confirm by running: ls /dev | grep sgx

View solution in original post

0 Kudos
9 Replies
JesusG_Intel
Moderator
3,803 Views

Hello Guba,


Please clarify whether you are running hardware release mode or hardware debug mode. Make sure the aesmd service is running:


Start the aesmd service:

$ ps aux | grep -i aesm

$ sudo systemctl start aesmd

$ cat /var/log/syslog | grep -i aesm


0 Kudos
Guba
Beginner
3,788 Views

Hello Jesus G,

the aesmd service is running. I used your command but no change.

I have both tried to run in hardware release (make SGX_DEBUG=0) as well as hardware debug (make) mode. Both ways I get "failed to load enclave.".

 

 

0 Kudos
Guba
Beginner
3,785 Views

I just checked my /dev/ path and realized there is no /dev/isgx or /dev/sgx path. Could this be part of the issue?

0 Kudos
JesusG_Intel
Moderator
3,776 Views

Hello Guba,


Yes, that is a problem because your SGX driver is not loaded. Try running these commands:


$ sudo /sbin/depmod

$ sudo /sbin/modprobe isgx


If you get an error, that means the SGX driver was not correctly installed.


The easiest way to install the driver is to:


  1. Download the desired SGX driver from here: https://download.01.org/intel-sgx/latest/linux-latest/distro/ubuntu18.04-server/ [driver_2.6.0_b0a445.bin is the regular SGX driver; driver_1.36.bin is the DCAP driver]
  2. Execute the bin file: sudo ./sgx_linux_x64_driver_2.6.0_b0a445b.bin
  3. You should see a, "Installation is successful!" message.
  4. Confirm by running: ls /dev | grep sgx

0 Kudos
Aaron-Sun
Beginner
3,225 Views

after run following commands, i did not get any error, but I still not find sgx in /dev

$ sudo /sbin/depmod

$ sudo /sbin/modprobe isgx

 

I installed regular driver and DCAP driver both and all successed. I'm running on CentOS 8.2.

0 Kudos
JesusG_Intel
Moderator
3,755 Views

Hello Guba,


Do you still need help with this issue?


0 Kudos
Guba
Beginner
3,752 Views

Excuse my late reply. It was indeed an issue with the driver. Thank you a lot for you help!

0 Kudos
Guba
Beginner
3,750 Views

I thus to completey reinstall the driver using the file from the link

0 Kudos
JesusG_Intel
Moderator
3,735 Views

This thread has been marked as answered and Intel will no longer monitor this thread. If you want a response from Intel in a follow-up question, please open a new thread.


0 Kudos
Reply