Intel® Software Guard Extensions (Intel® SGX)
Use hardware-based isolation and memory encryption to provide more code protection in your solutions.
1213 Discussions

Unable to run in Hardware mode. Error Message "failed to load enclave."

Guba
Beginner
1,151 Views

Hello,

after installing Intel SGX Driver (https://github.com/intel/linux-sgx-driver), PSW (incl launch, EPID-based attestation and algorithmic attestation package) and SDK, when trying to run the Sample Code in Hardware mode I receive the message "failed to load enclave."
When running the Sample Code in Simulation Mode I have no such problem.

Intel SGX is set on enabled in Bios and I have already tried to un- and reinstall all packages, but still no change.

I'm running on Ubuntu 18.04.

Thank you very much in advance for your help!

0 Kudos
1 Solution
JesusG_Intel
Moderator
1,118 Views

Hello Guba,


Yes, that is a problem because your SGX driver is not loaded. Try running these commands:


$ sudo /sbin/depmod

$ sudo /sbin/modprobe isgx


If you get an error, that means the SGX driver was not correctly installed.


The easiest way to install the driver is to:


  1. Download the desired SGX driver from here: https://download.01.org/intel-sgx/latest/linux-latest/distro/ubuntu18.04-server/ [driver_2.6.0_b0a445.bin is the regular SGX driver; driver_1.36.bin is the DCAP driver]
  2. Execute the bin file: sudo ./sgx_linux_x64_driver_2.6.0_b0a445b.bin
  3. You should see a, "Installation is successful!" message.
  4. Confirm by running: ls /dev | grep sgx

View solution in original post

9 Replies
JesusG_Intel
Moderator
1,146 Views

Hello Guba,


Please clarify whether you are running hardware release mode or hardware debug mode. Make sure the aesmd service is running:


Start the aesmd service:

$ ps aux | grep -i aesm

$ sudo systemctl start aesmd

$ cat /var/log/syslog | grep -i aesm


Guba
Beginner
1,131 Views

Hello Jesus G,

the aesmd service is running. I used your command but no change.

I have both tried to run in hardware release (make SGX_DEBUG=0) as well as hardware debug (make) mode. Both ways I get "failed to load enclave.".

 

 

Guba
Beginner
1,128 Views

I just checked my /dev/ path and realized there is no /dev/isgx or /dev/sgx path. Could this be part of the issue?

JesusG_Intel
Moderator
1,119 Views

Hello Guba,


Yes, that is a problem because your SGX driver is not loaded. Try running these commands:


$ sudo /sbin/depmod

$ sudo /sbin/modprobe isgx


If you get an error, that means the SGX driver was not correctly installed.


The easiest way to install the driver is to:


  1. Download the desired SGX driver from here: https://download.01.org/intel-sgx/latest/linux-latest/distro/ubuntu18.04-server/ [driver_2.6.0_b0a445.bin is the regular SGX driver; driver_1.36.bin is the DCAP driver]
  2. Execute the bin file: sudo ./sgx_linux_x64_driver_2.6.0_b0a445b.bin
  3. You should see a, "Installation is successful!" message.
  4. Confirm by running: ls /dev | grep sgx

View solution in original post

Aaron-Sun
Beginner
568 Views

after run following commands, i did not get any error, but I still not find sgx in /dev

$ sudo /sbin/depmod

$ sudo /sbin/modprobe isgx

 

I installed regular driver and DCAP driver both and all successed. I'm running on CentOS 8.2.

JesusG_Intel
Moderator
1,098 Views

Hello Guba,


Do you still need help with this issue?


Guba
Beginner
1,095 Views

Excuse my late reply. It was indeed an issue with the driver. Thank you a lot for you help!

Guba
Beginner
1,093 Views

I thus to completey reinstall the driver using the file from the link

JesusG_Intel
Moderator
1,078 Views

This thread has been marked as answered and Intel will no longer monitor this thread. If you want a response from Intel in a follow-up question, please open a new thread.


Reply