Intel Flexible Launch Control

[Degtayrev]

Hello, 

I am developing software with intel SGX as a requirement. I just bought a new laptop (Lenovo T15) with i5-10210U installed on it . The problem is my laptop doesnt have FLC supported (see the image attached). But based on this Link , my cpu is supposed to have FLC supported. Therefor is there any way to enable FLC on my laptop ?

[AndrewG_Intel]

Hello @Degtayrev

Thank you for posting on the Intel® communities.

In order to review this further, we would like to confirm/clarify the following to make sure we have the proper information.

Based on the link you provided (Option 1), to determine if the system's processor supports FLC, after running the command "cpuid | grep -i sgx", the output should indicate the following:

• SGX_LC: SGX launch config supported = true

However, when checking the output you got, it shows "SGX_LC: SGX launch config supported = false". This might indicate that FLC is not supported.

Also, since you mentioned that based on this Link, the CPU is supposed to have FLC supported, could you please point out in the document where to find the information for this statement? (This is just to make sure we're on the same page).

We're asking for this clarification because the only reference seems to refer to the support of "Intel® SGX DCAP ECDSA Attestation" on 8th Generation Intel® Core™ Processor or newer (indicating that DCAP ECDSA Attestation will work on those CPUs if they have support of FLC and Intel® AES-NI).

Best regards,

Andrew G.

Intel Customer Support Technician

[AndrewG_Intel]

Hello Degtayrev

We are checking this thread and we would like to know if you need further assistance. Please do not hesitate to contact us back if you have additional inquiries.

Best regards,

Andrew G.

Intel Customer Support Technician

[AndrewG_Intel · Accepted solution]

Hello Degtayrev

We have not heard back from you so we will proceed to close this thread now.

Before closing the thread, we would like to inform you that we conducted some research that pointed out that FLC is part of Intel® Software Guard Extensions (Intel® SGX), so basically if the processor supports SGX, it supports FLC too. As per the Product Specifications, the Intel® Core™ i5-10210U Processor supports Intel® SGX with Intel® ME.

However, the BIOS must also support FLC. Enabling and disabling FLC is within the scope of the computer/laptop manufacturer (OEM) as it seems this is done through the BIOS and being your system a laptop, the OEM could have modified the processor features to meet their expectation for that PC.

Having said that, for information on how to enable FLC on your system (in case it is supported), we recommend checking this further with your OEM. For your convenience, here is the link to Lenovo* Support.

If you need any additional information, please submit a new question as this thread will no longer be monitored.

Best regards,

Andrew G.

Intel Customer Support Technician