If EGo works in simulation mode (with
OE_SIMULATION=1), but not with SGX, check the following.
EGo currently supports Ubuntu 18.04 and 20.04.
The hardware must support SGX and it must be enabled in the BIOS:
$ sudo apt install cpuid $ cpuid | grep SGX SGX: Software Guard Extensions supported = true SGX_LC: SGX launch config supported = true SGX capability (0x12/0): SGX1 supported = true
SGX: Software Guard Extensions supportedis true if the hardware supports it.
SGX_LC: SGX launch config supportedis true if the hardware also supports FLC. This is required for attestation.
SGX1 supportedis true if it is enabled in the BIOS.
The SGX driver exposes a device:
If the output is empty, install the driver.
If your system supports FLC (see above):
wget https://download.01.org/intel-sgx/sgx-linux/2.12/distro/ubuntu`lsb_release -rs`-server/sgx_linux_x64_driver_1.36.2.bin chmod +x sgx_linux_x64_driver_1.36.2.bin sudo ./sgx_linux_x64_driver_1.36.2.bin
wget https://download.01.org/intel-sgx/sgx-linux/2.13.3/distro/ubuntu`lsb_release -rs`-server/sgx_linux_x64_driver_2.11.0_2d2b795.bin chmod +x sgx_linux_x64_driver_2.11.0_2d2b795.bin sudo ./sgx_linux_x64_driver_2.11.0_2d2b795.bin
If your system doesn’t support FLC, install the
wget -qO- https://download.01.org/intel-sgx/sgx_repo/ubuntu/intel-sgx-deb.key | apt-key add sudo add-apt-repository "deb [arch=amd64] https://download.01.org/intel-sgx/sgx_repo/ubuntu `lsb_release -cs` main" sudo apt install libsgx-launch
If EGo works in SGX mode (i.e., without
OE_SIMULATION), but attestation fails, check the following.
Attestation only works on SGX-FLC systems.
You must install a quote provider.