Intel® Software Guard Extensions (Intel® SGX)
Use hardware-based isolation and memory encryption to provide more code protection in your solutions.

pckcert api return empty content?

PatricMe
Beginner
638 Views

Help!!!

When I call "https://api.trustedservices.intel.com/sgx/certification/v3/pckcert", it return 200 status, but no pck_cert content. What is wrong with me?

The detail info is:

qeid=9F65C7678E2FC71159E7B5FD023A61AB

cpusvn=05050208FFFF00000000000000000000

pcesvn=0B00

pceid=0000

encrypted_ppid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

 

 

Platform Info:

uname -a:

Linux ubuntu 4.15.0-112-generic #113-Ubuntu SMP Thu Jul 9 23:41:39 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux

 

cat /proc/cpuinfo | grep 'model name' | uniq :
model name : Intel(R) Xeon(R) Platinum 8374C CPU @ 2.70GHz

0 Kudos
1 Solution
JesusG_Intel
Moderator
517 Views

Hello PatricMe,


Thanks for that feedback. The only thing left is to follow my previous instruction:


If you are getting a 404 error it means that you have not registered the platform so the backend does not recognize it. You must perform a multi-package registration before retrieving the cert. Please refer to this paper for full details:

 

https://download.01.org/intel-sgx/latest/dcap-latest/linux/docs/Intel_SGX_DCAP_Multipackage_SW.pdf


Sincerely,

Jesus G.

Intel Customer Support


View solution in original post

9 Replies
JesusG_Intel
Moderator
617 Views

Hello PatricMe,


First, let's make sure your platform has all of the necessary SGX components. Run these commands in your terminal and provide us the output as text or screenshots.


$ cpuid | grep -i sgx

$ cpuid | head (we should see vendor_id, version info, family, model, stepping id)

$ sudo apt list --installed | grep -i sgx

$ ls /dev | grep -i sgx


Sincerely,

Jesus G.

Intel Customer Support



PatricMe
Beginner
589 Views

cpuid | grep -i sgx:

PatricMe_0-1623402497509.png

cpuid | head:

PatricMe_1-1623402850546.png

sudo apt list --installed | grep -i sgx

PatricMe_2-1623402889225.png

 

ls /dev | grep -i sgx

PatricMe_3-1623402956096.png

 

 

I have 3 machines, this machine call a pckcert request,return 404:

detail info:

2021-06-11 02:09:38.382 [debug]: https://api.trustedservices.intel.com/sgx/certification/v3/pckcerts
2021-06-11 02:09:38.383 [debug]: {"searchParams":{"encrypted_ppid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pceid":"0000"},"method":"GET","headers":{"Ocp-Apim-Subscription-Key":"da6764847ecb4c79963d44e5721f75b7"}}

2021-06-11 02:09:39.205 [debug]: Response code 404 (Not Found)

JesusG_Intel
Moderator
578 Views

Hello PatricMe,

 

If you are getting a 404 error it means that you have not registered the platform so the backend does not recognize it. You must perform a multi-package registration before retrieving the cert. Please refer to this paper for full details:

 

https://download.01.org/intel-sgx/latest/dcap-latest/linux/docs/Intel_SGX_DCAP_Multipackage_SW.pdf

 

This link is also helpful:

 

https://api.portal.trustedservices.intel.com/

 

Also, please send us the output from:  $sudo rdmsr 0xCE -f 27:27

Sincerely,

Jesus G.

Intel Customer Support

 

 

PatricMe
Beginner
559 Views

PatricMe_0-1623725260693.png

 

rdmsr 0xCE -f 27:27   ,return no such file

 

JesusG_Intel
Moderator
533 Views

Hello PatricMe,


Be sure that the msr.ko kernel module is loaded before running rdmsr.


$ sudo modprobe msr

$ sudo rdmsr -f 27:27 0xCE


Sincerely,

Jesus G.

Intel Customer Support



PatricMe
Beginner
523 Views
JesusG_Intel
Moderator
518 Views

Hello PatricMe,


Thanks for that feedback. The only thing left is to follow my previous instruction:


If you are getting a 404 error it means that you have not registered the platform so the backend does not recognize it. You must perform a multi-package registration before retrieving the cert. Please refer to this paper for full details:

 

https://download.01.org/intel-sgx/latest/dcap-latest/linux/docs/Intel_SGX_DCAP_Multipackage_SW.pdf


Sincerely,

Jesus G.

Intel Customer Support


JesusG_Intel
Moderator
504 Views

Hello PatricMe,


Have you been able to make any progress in registering your platform according to the provided document?


Sincerely,

Jesus G.

Intel Customer Support


JesusG_Intel
Moderator
487 Views

Hello Patric,


We have not heard from you in several days so we will no longer monitor this thread. We hope you were able to resolve your issue. Please start a new thread if you need further help.


Sincerely,

Jesus G.

Intel Customer Support


Reply