Unverified Commit 6df92daf authored by kladko's avatar kladko

Fix test

parent 0615dc53
# Enabling SGX
<!-- SPDX-License-Identifier: (AGPL-3.0-only OR CC-BY-4.0) -->
To enable SGX on your machine, you'll need **Intel SGX** capable hardware. Most Intel chips that were produced after 2015 support **SGX**. Otherwise you can enable software-controlled SGX.
## Enable SGX on your machine
<!-- SPDX-License-Identifier: (AGPL-3.0-only OR CC-BY-4.0) -->
Once your tried sgxwallet in the simulation mode, you can enable sgx on your machine, and run the server in production mode.
### Verify Intel SGX is enabled in BIOS
1. Stop then remove the simulation mode sgxwallet containers either by doing
Enter BIOS by pressing the BIOS key during boot.
The BIOS key varies by manufacturer and could be F10, F2, F12, F1, DEL, or ESC.
```bash
sudo docker-compose rm
Usually Intel SGX is disabled by default.
```
> or
To enable, find the Intel SGX feature
(it is usually under the "Advanced" or "Security" menu),
enable Intel SGX, save your BIOS settings, and exit BIOS.
```bash
docker stop sgxwallet && docker rm sgxwallet
```
To enable SGX on your machine, you'll need **Intel SGX** capable hardware. Most Intel chips that were produced after 2015 support **SGX**. Otherwise you can enable software-controlled SGX.
2. Enter **BIOS** of your machine by pressing and holding **Del** or **F2** on boot-up and verify that **BIOS** includes **SGX options**.
If not, your machine cannot run **SGX**.
......@@ -47,10 +43,29 @@ make
## Install SGX driver
Run the following command:
```bash
cd scripts; sudo ./sgx_linux_x64_driver_2.5.0_2605efa.bin; cd ..
```
You can also try other driver versions from Intel website, but version 2.5.0_2605efa is the one
that we use for testing.
Reboot you machine after driver install. Do `ls /dev/isgx` to check that `isgx` device is properly installed.
If you do not see the `isgx` device, you need to troubleshoot your driver installation.
# Troubleshooting Installation
- If the message `intel_sgx: SGX is not enabled` appears in `/var/log/syslog`
Intel SGX needs to be enabled in BIOS
- If you are running in Intel SGX hardware mode, make sure you have device
`/dev/isgx` (and not `/dev/sgx`). Review the Intel SGX device driver
installation instructions above. If you have `/dev/sgx` the
device driver must be removed first
- If you are running in Intel SGX hardware mode, you need to modify
the `ias_api_key` in `config/tcs_config.toml` with your
IAS Subscription key obtained in the instructions above
......@@ -41,7 +41,7 @@ For details on Docker installation, see <https://docs.docker.com/engine/installa
### Check your machine supports SGX
Install these packages:
Install cpuid and libelf-dev packages:
```bash
sudo apt-get install -y libelf-dev cpuid
......@@ -49,29 +49,15 @@ sudo apt-get install -y libelf-dev cpuid
```
Verify your processor supports Intel SGX with:
`cpuid | grep SGX:`
'''bash
cpuid | grep SGX:
''''
The printout shoud read `SGX: Software Guard Extensions supported = true`
### Verify Intel SGX is enabled in BIOS
Verify Intel SGX is enabled in BIOS.
Enter BIOS by pressing the BIOS key during boot.
The BIOS key varies by manufacturer and could be F10, F2, F12, F1, DEL, or ESC.
Usually Intel SGX is disabled by default.
If disabled, enter BIOS and find the Intel SGX feature
(it is usually under the "Advanced" or "Security" menu),
enable Intel SGX, save your BIOS settings, and exit BIOS.
## Troubleshooting Installation
- If the message `intel_sgx: SGX is not enabled` appears in `/var/log/syslog`
Intel SGX needs to be enabled in BIOS
- If you are running in Intel SGX hardware mode, make sure you have device
`/dev/isgx` (and not `/dev/sgx`). Review the Intel SGX device driver
installation instructions above. If you have `/dev/sgx` the
device driver must be removed first
- If you are running in Intel SGX hardware mode, you need to modify
the `ias_api_key` in `config/tcs_config.toml` with your
IAS Subscription key obtained in the instructions above
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment