sgx_enable_device about linux-sgx HOT 13 CLOSED

This API is not provided in Linux SDK. You can go directly into the BIOS and turn SGX option to enabled.

from linux-sgx.

from linux-sgx.

Which version of Intel BIOS are you using? We didn't find any BIOS remove the option.

from linux-sgx.

S1200SP0
Intel Xeon CPU E3-1270 v5
IFWI Version: S1200SP.BR.64.0008.091420161502
BIOS Version: S1200SP.86B.01.03.0023.091420160802

Under Processor Configuration I only see the following options:
Hyber-threading
active processor cores
execute disable bit
intel virt tech
intel txt
intel vt for directed io
enhanced error containment mode
mlc streamer
mlc spatial prefetcher

from linux-sgx.

Intel SGX is only officially supported on Skylake and KabyLake CPU. As for Intel Xeon CPU E3, there's no official release BIOS to support Intel SGX feature.
I don't think the call to sgx_enable_device can solve the problem. The API also needs BIOS support. If the SGX feature is not supported by BIOS, the API can do nothing.

from linux-sgx.

For E3 server, please contact the vendor who provided the system if SGX is supported or which BIOS version enables the SGX.

from linux-sgx.

The vendor of the motherboard is Intel as is the BIOS. I realize Intel is a big company but I've been having a hard time finding whom is the right contact, I've tried this repo, Intel Support, Intel Forums. If you have any insight, I'd be happy to have it.

Secondly, what does the BIOS technically do with regards to SGX? Can enabling SGX for the platform be done via UEFI shell?

from linux-sgx.

I will check with internal team to see if there is any suggestion to share.

from linux-sgx.

For E3 server, you can download the latest Firmware from Intel download center.
https://downloadcenter.intel.com/download/26796/Intel-Server-Board-S1200SPO-S1200SPOR-Firmware-Update-Package-for-EFI-with-Intel-Software-Guard-Extensions-Support?v=t

from linux-sgx.

The software enable for Linux is now supported in the master branch via sgx_cap_enable_device from libsgx_capable. This does require root (or at least write access to /sys/firmware/efi).

from linux-sgx.

Thanks y'all. I'll be trying this next week and I'll post an update!

from linux-sgx.

You might find some of the information in this article on Intel SGX feature detection helpful (it was recently updated to include Linux content).

from linux-sgx.

I update the firmware, enabled SGX, and it's now available in OS. Thank you! I'm closing this issue.

from linux-sgx.