Summary
Why it is not possible to run an Intel® Software Guard Extensions (Intel® SGX) enclave from within a hypervisor
Description
Unable to determine how to create an enclave that runs in a hypervisor.
Resolution
Intel® Software Guard Extensions (Intel® SGX) enclave code consists of shared libraries that run in ring 3 mode, at the user level, and its resources are managed by the operating system (OS). An Intel SGX enclave cannot be created and run in a hypervisor because a hypervisor operates below an OS.