英特尔 sgx 在 bios 中启用,但在 ubuntu 系统中,isgx 驱动程序一直说“cpu 不支持 SGX1 指令”

英特尔 sgx 在 bios 中启用,但在 ubuntu 系统中,isgx 驱动程序一直说“cpu 不支持 SGX1 指令”

我有一块技嘉 b365m 主板,配有最新的 BIOS F3a 和酷睿 i5-9600k。我已在 BIOS 中将英特尔 sgx 设置为“已启用”,但在 ubuntu 中,isgx 驱动程序intel_sgx: CPU does not support SGX1 instructionsdmesg输出中一直显示。我使用英特尔的 sgx 软件启用应用程序https://github.com/intel/sgx-software-enable获取 SGX 的状态。虽然它说

Intel SGX is explicitly disabled, and your BIOS does not
support the "software enable" option. Check your BIOS for an
explicit option to enable Intel SGX.

这太奇怪了!然后我在 bios 中将 SGX 设置为“软件控制”,在操作系统中,isgx 驱动程序显示 intel_sgx: SGX is not enabled。我使用 SGX 软件启用应用程序来启用 SGX,它显示成功。但是当我重新启动计算机并进入操作系统时,奇怪的事情再次发生:isgx 显示intel_sgx: CPU does not support SGX1 instructions。但 SGX 启用应用程序的输出变为:

The software enable has been performed on this system and
Intel SGX will be enabled after the system is rebooted.

然后我再次重新启动,但事情并没有改变。isgx 驱动程序仍然说:

intel_sgx: CPU does not support SGX1 instructions

SGX 应用程序的输出仍然是

The software enable has been performed on this system and
Intel SGX will be enabled after the system is rebooted.

为什么事情会发展到这个地步?https://ark.intel.com/content/www/us/en/ark.html很明显9600k支持SGX。这可能是ubuntu和bios不兼容的问题吗?输出cpuid|grep SGX

      SGX: Software Guard Extensions supported = true
      SGX_LC: SGX launch config supported      = true
   Software Guard Extensions (SGX) capability (0x12/0):
      SGX1 supported                         = false
      SGX2 supported                         = false
      SGX ENCLV E*VIRTCHILD, ESETCONTEXT     = false
      SGX ENCLS ETRACKC, ERDINFO, ELDBC, ELDUC = false
      SGX: Software Guard Extensions supported = true
      SGX_LC: SGX launch config supported      = true
   Software Guard Extensions (SGX) capability (0x12/0):
      SGX1 supported                         = false
      SGX2 supported                         = false
      SGX ENCLV E*VIRTCHILD, ESETCONTEXT     = false
      SGX ENCLS ETRACKC, ERDINFO, ELDBC, ELDUC = false
      SGX: Software Guard Extensions supported = true
      SGX_LC: SGX launch config supported      = true
   Software Guard Extensions (SGX) capability (0x12/0):
      SGX1 supported                         = false
      SGX2 supported                         = false
      SGX ENCLV E*VIRTCHILD, ESETCONTEXT     = false
      SGX ENCLS ETRACKC, ERDINFO, ELDBC, ELDUC = false
      SGX: Software Guard Extensions supported = true
      SGX_LC: SGX launch config supported      = true
   Software Guard Extensions (SGX) capability (0x12/0):
      SGX1 supported                         = false
      SGX2 supported                         = false
      SGX ENCLV E*VIRTCHILD, ESETCONTEXT     = false
      SGX ENCLS ETRACKC, ERDINFO, ELDBC, ELDUC = false
      SGX: Software Guard Extensions supported = true
      SGX_LC: SGX launch config supported      = true
   Software Guard Extensions (SGX) capability (0x12/0):
      SGX1 supported                         = false
      SGX2 supported                         = false
      SGX ENCLV E*VIRTCHILD, ESETCONTEXT     = false
      SGX ENCLS ETRACKC, ERDINFO, ELDBC, ELDUC = false
      SGX: Software Guard Extensions supported = true
      SGX_LC: SGX launch config supported      = true
   Software Guard Extensions (SGX) capability (0x12/0):
      SGX1 supported                         = false
      SGX2 supported                         = false
      SGX ENCLV E*VIRTCHILD, ESETCONTEXT     = false
      SGX ENCLS ETRACKC, ERDINFO, ELDBC, ELDUC = false

输出dmidecode -t bios

Getting SMBIOS data from sysfs.
SMBIOS 3.1.1 present.

Handle 0x0000, DMI type 0, 26 bytes
BIOS Information
        Vendor: American Megatrends Inc.
        Version: F3a
        Release Date: 11/28/2019
        Address: 0xF0000
        Runtime Size: 64 kB
        ROM Size: 16 MB
        Characteristics:
                PCI is supported
                BIOS is upgradeable
                BIOS shadowing is allowed
                Boot from CD is supported
                Selectable boot is supported
                BIOS ROM is socketed
                EDD is supported
                5.25"/1.2 MB floppy services are supported (int 13h)
                3.5"/720 kB floppy services are supported (int 13h)
                3.5"/2.88 MB floppy services are supported (int 13h)
                Print screen service is supported (int 5h)
                Serial services are supported (int 14h)
                Printer services are supported (int 17h)
                ACPI is supported
                USB legacy is supported
                BIOS boot specification is supported
                Targeted content distribution is supported
                UEFI is supported
        BIOS Revision: 5.12

Handle 0x0043, DMI type 13, 22 bytes
BIOS Language Information
        Language Description Format: Long
        Installable Languages: 15
                en|US|iso8859-1
                zh|TW|unicode
                zh|CN|unicode
                ru|RU|iso8859-5
                de|DE|iso8859-1
                ja|JP|unicode
                ko|KR|unicode
                es|ES|iso8859-1
                fr|FR|iso8859-1
                it|IT|iso8859-1
                pt|PT|iso8859-1
                vi|VI|iso8859-1
                id|ID|iso8859-1
                tr|TR|iso8859-1
                pl|PL|iso8859-1
        Currently Installed Language: en|US|iso8859-1

任何帮助都将不胜感激。谢谢!:-)

相关内容