sgx-ra returns 0xe019 #1670
Description
Dear WAMR developers,
I'm trying to run the sample sgx-ra, but so far, I've got the following errors:
[get_platform_quote_cert_data ../qe_logic.cpp:378] Error returned from the p_sgx_get_quote_config API. 0xe019
[ERROR] rats_ocall_get_target_info()@L31: sgx_qe_get_target_info() with error code 0xe019
[get_platform_quote_cert_data ../qe_logic.cpp:378] Error returned from the p_sgx_get_quote_config API. 0xe019
[ERROR] rats_ocall_qe_get_quote_size()@L38: sgx_qe_get_quote_size(): 0xe019
[ERROR] sgx_ecdsa_collect_evidence()@L116: sgx_qe_get_quote_size(): 0x0000, 0xa000e019
[ERROR] librats_collect_evidence_to_json()@L114: failed to librats_collect_evidence return 0xa000e019
Librats collect evidence failed.
Regarding my configuration, I have successfully completed the installation of all the components, as described in the README.
Googling around the error code "0xe019", I discover this may be due to the missing component PCCS. So, I have installed it following this guide, subscribed to the PCS API from Intel, verified that my chip could be verified using the tool PCKIDRetrievalTool, but I still get the same error from the WAMR's sample sgx-ra.
Do you have an idea why I get this error?
Does this sample require the installation of PCCS? If so, I think we may better document the installation part in the README.
For completeness, here is the output of sgx-detect:
❯ sudo ./sgx-detect
Detecting SGX, this may take a minute...
✔ SGX instruction set
✔ CPU support
✔ CPU configuration
✔ Enclave attributes
✔ Enclave Page Cache
SGX features
✔ SGX2 ✔ EXINFO ✘ ENCLV ✘ OVERSUB ✘ KSS
Total EPC size: 94.0MiB
✔ Flexible launch control
✔ CPU support
✔ CPU configuration
✔ Able to launch production mode enclave
✔ SGX system software
✔ SGX kernel device (/dev/sgx_enclave)
✔ libsgx_enclave_common
✔ AESM service
✔ Able to launch enclaves
✔ Debug mode
✔ Production mode
✔ Production mode (Intel whitelisted)
You're all set to start running SGX programs!
Cheers,
Jämes