sgx_init_quote return SGX_ERROR_UPDATE_NEEDED

[rpplusplus]

My Computer installed 'Intel SGX Linux 2.3.1' and it can run LocalAttestation in HW Mode
But when I run RemoteAttestation, I got a SGX_ERROR_UPDATE_NEEDED.

Try to call sgx_init_quote directly, same result: SGX_ERROR_UPDATE_NEEDED

Then I try to install Windows 10 on my PC to use SGX Windows Version, I got same error

I have no idea about it.

[andyzyb]

Can you check if your BIOS is upgraded to the latest one? The error seems returned from provisioning server which means your platform needs update.

[jasl]

Hi @andyzyb we are using MS-EARTHSHAKER H311N-DV (seems only available in Chinese site) with latest BIOS (released at 2018/06/12 through the site).

[andyzyb]

You may check with hardware vendor and see if there is any new BIOS or new patch released from Intel since June.

[jasl]

@andyzyb thank you, one more question, which part of BIOS relates to SGX remote attestation? I googled that some people said RA required Intel ME, if this correct, dos it means iclsClient is required for RA?

[jasl]

Does this update required has a notice? we are trying to build an application based on SGX and concern about force update would break our service

[andyzyb]

It doesn't require ME, so nor iclsclient. Most of BIOS updates doesn't impact SGX, only some security enhancements may require latest BIOS/microcode patch.

[jasl]

@andyzyb I see, thank you