Local LAN Configuration for SGX
To realize local LAN Configuration for SGX, you need to start a local LAN PCCS service locally or on the LAN, and then change the pccs_url
in the sgx_default_qcnl.conf
file on all local DHC nodes to the local LAN PCCS link (for example, if the PCCS service is deployed on host1
, then it should be "pccs_url": "https://host1:8081/sgx/certification/v4/").
You may refer to the steps for more details:
Applying for an Intel API Key
You'll need to acquire an Intel API key to utilize Intel's Software Development Kit (SDK) for Intel SGX (Software Guard Extensions). This key grants you access to Intel's resources and enables you to develop and deploy SGX-based applications.
Steps:
Create an Intel Developer Zone Account: If you don't already have one, create an account on the Intel Developer Zone website.
Navigate to the Intel API Key Management Page: Once logged in, go to the Intel API Key Management page.
Select the "Intel SGX SDK" Product: Choose the "Intel SGX SDK" product from the list of available products.
Provide Required Information: Fill out the requested information, including your name, organization, and project details.
Submit the Request: Review the information you've provided and submit the request. Intel will evaluate your request and notify you of the outcome.
![](https://docs.bool.network/~gitbook/image?url=https%3A%2F%2F362083554-files.gitbook.io%2F%7E%2Ffiles%2Fv0%2Fb%2Fgitbook-x-prod.appspot.com%2Fo%2Fspaces%252FBPzEwQWF8yFmEtNtg2pz%252Fuploads%252FCplGOsh7peutbhM3BpaD%252Fimage.png%3Falt%3Dmedia%26token%3D21400dc5-ef2e-4df7-b84e-e101cf8cd104&width=768&dpr=4&quality=100&sign=69298315&sv=1)
Installing a Local LAN PCCS Service
![](https://docs.bool.network/~gitbook/image?url=https%3A%2F%2F362083554-files.gitbook.io%2F%7E%2Ffiles%2Fv0%2Fb%2Fgitbook-x-prod.appspot.com%2Fo%2Fspaces%252FBPzEwQWF8yFmEtNtg2pz%252Fuploads%252FjTbIZ79bMgUeIJyJaKpq%252Fimage.png%3Falt%3Dmedia%26token%3Dd551e4e5-41ec-4d07-8027-00b1f1333297&width=768&dpr=4&quality=100&sign=118fa422&sv=1)
During the installation process, enter the API key you applied for earlier, and set a password for PCCS. Here, we will use "pccs12345678" as an example.
![](https://docs.bool.network/~gitbook/image?url=https%3A%2F%2F362083554-files.gitbook.io%2F%7E%2Ffiles%2Fv0%2Fb%2Fgitbook-x-prod.appspot.com%2Fo%2Fspaces%252FBPzEwQWF8yFmEtNtg2pz%252Fuploads%252FL4WxnDAVB48lYuDUG87f%252Fimage.png%3Falt%3Dmedia%26token%3D7d05043a-0257-4ce7-9fb7-fdee27e2a0cc&width=768&dpr=4&quality=100&sign=a4184987&sv=1)
Once you have completed the above steps, you can skip the remaining steps by simply pressing the Enter key.
![](https://docs.bool.network/~gitbook/image?url=https%3A%2F%2F362083554-files.gitbook.io%2F%7E%2Ffiles%2Fv0%2Fb%2Fgitbook-x-prod.appspot.com%2Fo%2Fspaces%252FBPzEwQWF8yFmEtNtg2pz%252Fuploads%252FI63JwfUVTAbbg2wgN5LV%252Fimage.png%3Falt%3Dmedia%26token%3D3fe06064-8316-44b7-832a-1410fd3358de&width=768&dpr=4&quality=100&sign=562b13ca&sv=1)
The above steps indicate that the PCCS service installation is complete. However, upon restarting the service, the following error message is encountered:
![](https://docs.bool.network/~gitbook/image?url=https%3A%2F%2F362083554-files.gitbook.io%2F%7E%2Ffiles%2Fv0%2Fb%2Fgitbook-x-prod.appspot.com%2Fo%2Fspaces%252FBPzEwQWF8yFmEtNtg2pz%252Fuploads%252FjyZ8BfKZ1KTagUFQsAu8%252Fimage.png%3Falt%3Dmedia%26token%3D0ede9f70-f324-4844-bae8-6296ec5bcd15&width=768&dpr=4&quality=100&sign=ddeb1a1f&sv=1)
Solution:
Step 1. Install the register tool for SGX
Step 2. Modify the configuration file
PCCS_URL=https://localhost:8081/sgx/certification/v4/platforms
![](https://docs.bool.network/~gitbook/image?url=https%3A%2F%2F362083554-files.gitbook.io%2F%7E%2Ffiles%2Fv0%2Fb%2Fgitbook-x-prod.appspot.com%2Fo%2Fspaces%252FBPzEwQWF8yFmEtNtg2pz%252Fuploads%252F1fsqtFtzNRWz5AqcMav9%252Fimage.png%3Falt%3Dmedia%26token%3D0e067783-554c-4709-b7aa-a9744b45d96f&width=768&dpr=4&quality=100&sign=9f8ca970&sv=1)
Step 3. Use the PCK ID Retrieval Tool
![](https://docs.bool.network/~gitbook/image?url=https%3A%2F%2F362083554-files.gitbook.io%2F%7E%2Ffiles%2Fv0%2Fb%2Fgitbook-x-prod.appspot.com%2Fo%2Fspaces%252FBPzEwQWF8yFmEtNtg2pz%252Fuploads%252Fa84pXVGpr635r8XIkz0o%252Fimage.png%3Falt%3Dmedia%26token%3D54ae1db3-2aec-4fa8-a2c7-e156c8f30c13&width=768&dpr=4&quality=100&sign=e5ecabaf&sv=1)
![](https://docs.bool.network/~gitbook/image?url=https%3A%2F%2F362083554-files.gitbook.io%2F%7E%2Ffiles%2Fv0%2Fb%2Fgitbook-x-prod.appspot.com%2Fo%2Fspaces%252FBPzEwQWF8yFmEtNtg2pz%252Fuploads%252FCnPYGT1dKhpwNauMirUZ%252Fimage.png%3Falt%3Dmedia%26token%3Dcbf984a2-28a0-4bc8-8bc0-38325a62cca7&width=768&dpr=4&quality=100&sign=b39e989b&sv=1)
Step 4. Enable the SGX function
If the error message persists, you may need to reseat the motherboard battery, reset the machine's BIOS, and re-enable the SGX feature, as shown in the following image:
![](https://docs.bool.network/~gitbook/image?url=https%3A%2F%2F362083554-files.gitbook.io%2F%7E%2Ffiles%2Fv0%2Fb%2Fgitbook-x-prod.appspot.com%2Fo%2Fspaces%252FBPzEwQWF8yFmEtNtg2pz%252Fuploads%252F09xVd3SnLuJ1MBWNWSq8%252Fimage.png%3Falt%3Dmedia%26token%3D38b356e1-5bea-464a-8759-eb7e04fa8934&width=768&dpr=4&quality=100&sign=6838cd9e&sv=1)
![](https://docs.bool.network/~gitbook/image?url=https%3A%2F%2F362083554-files.gitbook.io%2F%7E%2Ffiles%2Fv0%2Fb%2Fgitbook-x-prod.appspot.com%2Fo%2Fspaces%252FBPzEwQWF8yFmEtNtg2pz%252Fuploads%252FBNnyKAExSYDjnX40pFX3%252Fimage.png%3Falt%3Dmedia%26token%3Df2a6b090-2bcb-4d94-898d-7fdd30ae4b04&width=768&dpr=4&quality=100&sign=ae904e88&sv=1)
Step 5. Run the PCK ID Retrieval Tool
Keep running the tool until the registration has been done.
![](https://docs.bool.network/~gitbook/image?url=https%3A%2F%2F362083554-files.gitbook.io%2F%7E%2Ffiles%2Fv0%2Fb%2Fgitbook-x-prod.appspot.com%2Fo%2Fspaces%252FBPzEwQWF8yFmEtNtg2pz%252Fuploads%252Fucpmbj1xfinnwoSjZODi%252Fimage.png%3Falt%3Dmedia%26token%3Ddee58d97-f68c-4d53-8e66-f660aa1f11a5&width=768&dpr=4&quality=100&sign=8dcb6b28&sv=1)
Step 6. Start the DHC node processes
Once SGX registration is successful, you can start the DHC node processes. However, due to data caching, you may encounter the following error message upon the first attempt:
![](https://docs.bool.network/~gitbook/image?url=https%3A%2F%2F362083554-files.gitbook.io%2F%7E%2Ffiles%2Fv0%2Fb%2Fgitbook-x-prod.appspot.com%2Fo%2Fspaces%252FBPzEwQWF8yFmEtNtg2pz%252Fuploads%252FeyPX3pqggkrk6snaCWbX%252Fimage.png%3Falt%3Dmedia%26token%3D9d8d0067-afab-45f7-aa21-cb060dd67f73&width=768&dpr=4&quality=100&sign=6567e2e9&sv=1)
Try more attempts until the registration has been done.
![](https://docs.bool.network/~gitbook/image?url=https%3A%2F%2F362083554-files.gitbook.io%2F%7E%2Ffiles%2Fv0%2Fb%2Fgitbook-x-prod.appspot.com%2Fo%2Fspaces%252FBPzEwQWF8yFmEtNtg2pz%252Fuploads%252Fkp4DNxx4hnwHbmwRMPOb%252Fimage.png%3Falt%3Dmedia%26token%3Dec2ec880-3e39-452a-a53a-f7d44217872e&width=768&dpr=4&quality=100&sign=698614ad&sv=1)
Last updated