Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

docs/node: Add multi-package BIOS configuration #933

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

docs/node: Add multi-package BIOS configuration #933

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 10 additions & 2 deletions docs/node/run-your-node/prerequisites/set-up-trusted-execution-environment-tee.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -219,9 +219,11 @@ running SGX workloads inside guest VMs. In this case additional provisioning may
be required to be performed on the host.

Note that the system must be booted in UEFI mode for provisioning to work as the
provisioning process uses UEFI variables to communicate with the BIOS.
provisioning process uses UEFI variables to communicate with the BIOS. In
addition the **SGX Auto MP Registration** BIOS configuration setting should be
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This should probably go up, where we enable SGX, disable hyperthreading etc.

set to _enabled_.

#### Ubuntu 22.04
#### Ubuntu 22.04+

To provision and register your multi-socket system you need to install the Intel
SGX Multi-Package Registration Agent Service as follows (assuming Intel's SGX
Expand All @@ -231,6 +233,12 @@ apt repository has been added as discussed above):
sudo apt install sgx-ra-service
```

After boot, the log in `/var/log/mpa_registration.log` should indicate
successful registration. If an error is reported, make sure that you have
enabled SGX Auto MP Registration in the BIOS as mentioned above. You can also
perform re-provisioning by rebooting and setting the **SGX Factory Reset**
option to _enabled_.

#### VMware vSphere 8.0+

In order to enable SGX remote attestation on VMware vSphere-based systems,
Expand Down