📃
Confidential Computing 101
HomeTechnologyTry CC!
  • Welcome
  • Confidential Computing
    • What is Confidential Computing
    • What problems Confidential Computing solves
      • Bare Metal
      • Docker
      • Kubernetes
      • Knative
    • Why Confidential Computing
    • How Confidential Computing works
      • Memory Encryption
      • Workload Attestation
      • Confidential Boot
      • Sealing / Binding
      • Secret Provisioning
    • Technology Overview
    • Cloud Service Providers
  • Technology in depth
    • Intel SGX
      • Getting Started
        • Bare Metal Server Installation
        • Enclave Development Environment
        • Intel SGX SDK Setup
      • Technology
        • 🎭Features
        • 💂Threat Model
        • 🆚Versions
        • 🟦Concepts
          • 🏦Memory Encryption
          • 👮Local and Remote Attestation
          • 🖼️DCAP-Attestation Framework
          • 🔑Secret Key Provisioning
      • enclaive Development Kit
        • 🏢Architecture
        • 🌪️Workflow
        • 🌍Tutorials
          • Azure DCdsv3, DCsv2, or DCsv3 Setup
          • Redis in cK8s
          • MongoDB in cK8s
          • K8s + HashiCorp Vault on Azure DCsv3
      • Vault Remote Attestation Plug-In
        • 🏃‍♂️Initialization
        • 👮Attestation
        • ⚙️Configuration
    • Intel TDX
      • Getting Started
        • Azure
        • AWS
        • GCP
      • Technology
        • History
          • VT
          • TME/MKTME
          • SGX
        • Features
        • Threat Model
        • Concepts
          • Architecture
            • TDX Module
          • Memory Encryption
            • Confidentiality and Integrity
            • Keys and Key Management
          • TD Partitioning
          • DCAP-Attestation
            • Overview
            • Platform Registration
            • Attestation Report
    • AMD SEV
      • Getting Started
        • Azure
        • AWS
        • GCP
      • Technology
        • History
        • Threat Model
        • SME Concepts
          • Use Models
        • SEV-SNP Concepts
          • Features
            • Integrity Threats
            • Reverse Map Table
            • Page Validation
            • Page States
            • Virtual Machine Privilege Levels
            • Interrupt/Exception Protection
            • Trusted Platform Information
            • TCB Versioning
            • VM Launch & Attestation
            • VM Migration
            • Side Channels
          • Use Cases
          • Architecture
            • Encrypted Memory
            • Key Management
          • Software Implications
    • ARM CC
      • Technology
        • Introduction
        • Threat Model
        • Design
        • Comparison
    • Attestation Methods
      • Raw Attestation
      • Raw Attestation with Secure-Boot
      • Raw Attestation with a vTPM
        • AMD Secure VM Service Module and vTPMs
      • Raw Attestation with paravirtualized TPM
  • Resources
    • Youtube
    • Github
    • Products
Powered by GitBook
On this page
  • Intel(R) Software Guard Extensions for Linux* OS
  • Ubuntu 20.04 LTS 64-bit Desktop
  • Intel(R) Software Guard Extensions for Win10 x64
  • Windows 10 x64 version 20H2 (OS Build 19042.964)

Was this helpful?

  1. Technology in depth
  2. Intel SGX
  3. Getting Started

Intel SGX SDK Setup

Last updated 7 months ago

Was this helpful?

Getting the Intel SDK running on your computer is sometimes tricky. Check out the wiki for tutorials.

Intel(R) Software Guard Extensions for Linux* OS

Ubuntu 20.04 LTS 64-bit Desktop

This documentation is a quick installation guide to run Intel(R) Software Guard Extensions on Ubuntu 20.04 LTS 64-bit Desktop with disabled Flexible Launch Control (FLC) support.

Prerequisites

To install the Intel® SGX PSW, first install the following tools

$ sudo apt-get install libssl-dev libcurl4-openssl-dev libprotobuf-dev

To install the Intel® SGX SDK, install the following tools

$ sudo apt-get install build-essential python-is-python3

Install Intel® SGX Driver Installation

Download the DCAP . You find the DCAP version in the driver_readme.txt file.

Set the protections to allow for the .bin file execution

$ chmod 777 sgx_linux_x64_driver_<version>.bin

Run the following command:

$ sudo./sgx_linux_x64_driver_<version>.bin

Reboot your system.

Intel® SGX Platform Software (PSW) Installation

Add the following repository to your sources

$ echo 'deb [arch=amd64] https://download.01.org/intel-sgx/sgx_repo/ubuntu focal main' | sudo tee /etc/apt/sources.list.d/intel-sgx.list

Add the key to the list of trusted keys used by the apt to authenticate packages:

$ wget https://download.01.org/intel-sgx/sgx_repo/ubuntu/intel-sgx-deb.key 
$ sudo apt-key add intel-sgx-deb.key

Update the apt and install the packages:

$ sudo apt-get update

Install launch service:

$ sudo apt-get install libsgx-launch libsgx-urts

Install EPID-based attestation service:

$ sudo apt-get install libsgx-epid

Install algorithm agnostic attestation service

$ sudo apt-get install libsgx-quote-ex

Install Intel® SGX SDK Installation

Set the protections to allow for the .bin file execution

$ chmod 777 sgx_linux_x64_sdk_<version>.bin

Install the SDK using the following command:

$ sudo./sgx_linux_x64_sdk_<version>.bin

Install the SDK in directory /opt/intel/sgxsdk.

Run the following command

source /opt/intel/sgxsdk/environment

Find further Documentation

Intel(R) Software Guard Extensions for Win10 x64

Windows 10 x64 version 20H2 (OS Build 19042.964)

Prerequisites

Update bios/uefi to the newest version. The new firmware can be found at the page of your manufactor or it can be updated through their distributed applications. To run with native Intel SGX support, enable SGX in your bios/uefi. Mostly found under security.

Install Intel® SGX

Download .

project home page on

Download Intel SGX SDK for Windows v.2.12.1004.exe and Intel SGX PSW for Windows v.2.12.102.1.exe from .

Intel(R) SGX for Linux* OS
01.org
Intel(R) SGX Programming Reference
here
Intel® SGX SDK package
driver