Article ID: 000057603 Content Type: Product Information & Documentation Last Reviewed: 10/27/2021

Unable to Enable Intel® Software Guard Extensions (Intel® SGX) in BIOS or via Software Applications

BUILT IN - ARTICLE INTRO SECOND COMPONENT
Summary

Four conditions a platform must meet for Intel® Software Guard Extensions (Intel® SGX) to be enabled

Description
Resolution

Processor support is not enough to have a fully Intel SGX–enabled system.

Four conditions must be met for Intel SGX to be enabled on a system:

  1. The processor must support Intel SGX.
  2. The BIOS must support Intel SGX and expose the SGX configuration setting. The Intel SGX setting must be either Enabled or Software Controlled.
  3. The Intel SGX Platform Software (PSW) package must be installed.
  4. An application must enable Intel SGX if Intel SGX is set to Software Controlled in BIOS.
Additional information

Contact the motherboard vendor or original equipment manufacturer (OEM) for guidance on exposure and location of Intel® Software Guard Extensions (Intel® SGX) settings in the BIOS.

It is the responsibility of the BIOS manufacturer to expose Intel® Software Guard Extensions (Intel® SGX) settings in the BIOS.

Refer to Properly Detecting Intel® Software Guard Extensions (Intel® SGX) in Your Applications for a full explanation of detecting and enabling Intel SGX on a platform using Intel SGX Software Development Kit commands.