pckcert api return empty content?

[PatricMe]

Help!!!

When I call "https://api.trustedservices.intel.com/sgx/certification/v3/pckcert", it return 200 status, but no pck_cert content. What is wrong with me?

The detail info is:

qeid=9F65C7678E2FC71159E7B5FD023A61AB

cpusvn=05050208FFFF00000000000000000000

pcesvn=0B00

pceid=0000

encrypted_ppid=B92EF41D5CDCCA15DCAB33D6FC27990EAEE0867750A4988F07D96D92CE177466C8841AE258CB7815661BB48B6AAE728AC75E7A3F0D565FCF2028E6DC79F878786311B48D2A2E2E37CB9D05F9F805C60E98EBF4BF4F225FB37043EEB929970F09D54F1177D25A271FC1872D4B343226F6AD48F0FF511BFDC06C15A04422DC9B65D458D51A23CB8741D8A08210E52E84C897F5887301291598A166BD4FE841EF05F3A1761BCCAFED33A24515951EBF914D5CDCB983C745B3C7A907896251FA783B88499F666A3B2F2D33E55931FE19866627DA36DBB41C2C9FB4738DCECEF23645A81EAFFEA8E2C753B427894EF94605F69CEF84BB01660C47B5988CEC12826F7429A00F8144470D9457929E3B3FE46848C188DB8904A54391A4E423F2DC3337F0ED64683999DF3B3C8EF9F3E55CAE1963AB82E95C028137CCDBBE271DC1E9B8A17EFAEF2B9A7474DEB5C69C0A4F16588ABDF70EC1A6EB8074C7983578E50DA6C69787EDF9DC018217D4A34A7DE7E869FF29CD6757C609D1E019337BF7C5801E87

Platform Info:

uname -a:

Linux ubuntu 4.15.0-112-generic #113-Ubuntu SMP Thu Jul 9 23:41:39 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux

cat /proc/cpuinfo | grep 'model name' | uniq :
model name : Intel(R) Xeon(R) Platinum 8374C CPU @ 2.70GHz

[JesusG_Intel]

Hello PatricMe,

First, let's make sure your platform has all of the necessary SGX components. Run these commands in your terminal and provide us the output as text or screenshots.

$ cpuid | grep -i sgx

$ cpuid | head (we should see vendor_id, version info, family, model, stepping id)

$ sudo apt list --installed | grep -i sgx

$ ls /dev | grep -i sgx

Sincerely,

Jesus G.

Intel Customer Support

[PatricMe]

cpuid | grep -i sgx：

cpuid | head：

sudo apt list --installed | grep -i sgx

ls /dev | grep -i sgx

I have 3 machines, this machine call a pckcert request,return 404:

detail info：

2021-06-11 02:09:38.382 [debug]: https://api.trustedservices.intel.com/sgx/certification/v3/pckcerts
2021-06-11 02:09:38.383 [debug]: {"searchParams":{"encrypted_ppid":"26BF31EED592F5F7852162ADBA82E2D890A55FFBFCAADE0BCF64B7D34357B525FC6AD00917A5337F533577ADEE75F4449B5DA0BDFC859202FC03196D70C05DE6A8D2317CAF07A48DF0BE706D935353A27E79375E8CC57451AE3B30B979CB7E47C20C1E125B2C2E2C4C1ED0C3CCC258786DBA78994F0AA8A391AF7029F77A522EB89326AD5C5D74CC527DA9A262A5F7BB62773AF23D7F9844DFEE305ADDF7E84F9AC2FD896B2730A7207CF48F2363B61B2EE355C7175C103A215C3C8C9AAEAD18539E4A1FB8A452CD5E8E84765E64279B4DCBD6AF33CDB2D5807D8AADD4818DBA172F10B100A40A8772CC8F0D3A45269FC5D7AB39B98F04B994272EAE62EDB9B5AB2653230050BB227F95D8DC97F5A363DDC9E736E5097C9A2C07C7966C26D08715F0C7D24285A6AA9B3AE04A6843841C87896F4390045584A101B2F574165EDE09CCCED795CF8213E3636E470EFFCEA31C80246DF7CB3340A456C0B2F343354EAD8EADD1412F2C95B6845090D565C2BBD12DFB33802F4592B08BAE74171802A6","pceid":"0000"},"method":"GET","headers":{"Ocp-Apim-Subscription-Key":"da6764847ecb4c79963d44e5721f75b7"}}

2021-06-11 02:09:39.205 [debug]: Response code 404 (Not Found)

[JesusG_Intel]

Hello PatricMe,

If you are getting a 404 error it means that you have not registered the platform so the backend does not recognize it. You must perform a multi-package registration before retrieving the cert. Please refer to this paper for full details:

https://download.01.org/intel-sgx/latest/dcap-latest/linux/docs/Intel_SGX_DCAP_Multipackage_SW.pdf

This link is also helpful:

https://api.portal.trustedservices.intel.com/

Also, please send us the output from:  $sudo rdmsr 0xCE -f 27:27

Sincerely,

Jesus G.

Intel Customer Support

[PatricMe]

rdmsr 0xCE -f 27:27   ，return no such file

[JesusG_Intel]

Hello PatricMe,

Be sure that the msr.ko kernel module is loaded before running rdmsr.

$ sudo modprobe msr

$ sudo rdmsr -f 27:27 0xCE

Sincerely,

Jesus G.

Intel Customer Support

[PatricMe]

result of rdmsr is: 

[JesusG_Intel · Accepted solution]

Hello PatricMe,

Thanks for that feedback. The only thing left is to follow my previous instruction:

If you are getting a 404 error it means that you have not registered the platform so the backend does not recognize it. You must perform a multi-package registration before retrieving the cert. Please refer to this paper for full details:

https://download.01.org/intel-sgx/latest/dcap-latest/linux/docs/Intel_SGX_DCAP_Multipackage_SW.pdf

Sincerely,

Jesus G.

Intel Customer Support

[JesusG_Intel]

Hello PatricMe,

Have you been able to make any progress in registering your platform according to the provided document?

Sincerely,

Jesus G.

Intel Customer Support

[JesusG_Intel]

Hello Patric,

We have not heard from you in several days so we will no longer monitor this thread. We hope you were able to resolve your issue. Please start a new thread if you need further help.

Sincerely,

Jesus G.

Intel Customer Support