Intel® Software Guard Extensions

Register Your Production Enclave

1. Determine If You Need a Commercial License

Use the following table to find the license you need. For more information, see the Licensing FAQ.

  • Launch approver:
    • Third party: A cloud service provider, data center hosting provider, or enterprise managing the hardware that's enabled for Intel® Software Guard Extensions (Intel® SGX) determines the launch policy.
    • Intel: A registered list of Intel SGX applications or solutions determines the launch policy.
  • Attestation model: Determines if you need to attest the hardware configuration or solution before the launch.
    For more information, see Attestation & Provisioning Services.
  • Commercial license required: Indicates whether you need the license. If you need to request one, go to Step 2.

Launch Approver

Attestation Model

Commercial License Required
Third party
 Third-party attestation service
 No
Third party
 No attestation required
 No
Third party
 Intel attestation service
 Yes
Intel
 Third-party attestation service
 Yes
Intel
 No attestation required
 Yes
Intel
 Intel attestation service
 Yes
View all Show less

2. Request a Commercial License*

a. Review the licensee guide and the commercial use license agreement.

b. Submit a request for a commercial license.

c. If your request is approved, an Intel representative and your company will sign the agreement.

For information about the future availability of the Intel® Software Guard Extensions Attestation Service Utilizing Intel® Enhanced Privacy ID, see the End-of-Life (EOL) Timeline.

3. Add Your Solution or Application to the Launch Policy List from Intel

After executing your commercial license, the program office sends you an email with instructions. To run your enclave in a release mode, do the following:

a. Complete the registration form.

b. Create a SIGSTRUCT file (a signature structure, or enclave certificate) by following the instructions in Enclave Signing Tool.

Note When you save the file, reference the registration form for naming guidelines.

c. Return the completed registration form and SIGSTRUCT file to the program office.

4. Register to Use the Attestation Services from Intel

Once your commercial license request is approved and your enclave signing key is added to the launch policy list (if applicable), you can submit your subscription request on the Attestation Service API Portal.

Note A valid user account is required. For corporate customers, we recommend a public distribution list. The associated email address receives notices for updates, new features, availability or downtime, and revocation.

5. Release to the Public

Make your secure application or solution with security features available for use.