/dev/isgx does not get installed about linux-sgx-driver

[sbellem]

Solved the issue with the following steps:

turn computer off
turn computer on
go into BIOS
disable SGX
boot
turn computer off
go into BIOS
enable SGX
boot

This removed the in-kernel (or DCAP) driver /dev/sgx, and after installing the out-of-tree driver, /dev/isgx was there.

[sbellem]

The trick used above (in #143 (comment)) does not work anymore. The in-kernel driver /dev/sgx is always there, meanwhile the out-of-tree driver, /dev/isgx is not.

[sbellem]

Output of dmesg:

[  105.882805] isgx: loading out-of-tree module taints kernel.
[  105.882843] isgx: module verification failed: signature and/or required key missing - tainting kernel
[  105.883175] intel_sgx: Intel SGX Driver v2.11.1                                                                                           
[  105.883194] intel_sgx INT0E0C:00: EPC bank 0x50200000-0x55f80000                                                                          
[  105.902148] intel_sgx:  can not reset SGX LE public key hash MSRs                                                                         
[  105.902222] intel_sgx: second initialization call skipped

related

• intel/linux-sgx#451
• https://forum.scrt.network/t/troubleshooting-guide-error-sgx-driver-not-found/1196
• https://community.intel.com/t5/Intel-Software-Guard-Extensions/Error-Invalid-SGX-device/m-p/1205181

[haitaohuang]

The error is a warning, installation should work fine. You dmesg indicates it was installed. Not sure why you don't see /dev/isgx
here is the log on my system with FLC (note u should not use this driver on FLC system):

make[1]: Entering directory '/usr/src/linux-headers-5.13.0-1017-azure'
  CC [M]  /opt/intel/sgxdriver/package/sgx_main.o
  CC [M]  /opt/intel/sgxdriver/package/sgx_page_cache.o
  CC [M]  /opt/intel/sgxdriver/package/sgx_ioctl.o
  CC [M]  /opt/intel/sgxdriver/package/sgx_vma.o
  CC [M]  /opt/intel/sgxdriver/package/sgx_util.o
  CC [M]  /opt/intel/sgxdriver/package/sgx_encl.o
  CC [M]  /opt/intel/sgxdriver/package/sgx_encl2.o
  LD [M]  /opt/intel/sgxdriver/package/isgx.o
  MODPOST /opt/intel/sgxdriver/package/Module.symvers
  CC [M]  /opt/intel/sgxdriver/package/isgx.mod.o
  LD [M]  /opt/intel/sgxdriver/package/isgx.ko
  BTF [M] /opt/intel/sgxdriver/package/isgx.ko
Skipping BTF generation for /opt/intel/sgxdriver/package/isgx.ko due to unavailability of vmlinux
make[1]: Leaving directory '/usr/src/linux-headers-5.13.0-1017-azure'

uninstall.sh script generated in "/opt/intel/sgxdriver".

Installation is successful!

output of "ls -al /dev/sgx" may help identify why /dev/isgx not showing up.

[sbellem]

Somewhat related, but for a machine where the kernel driver (/dev/sgx) is not installed, and for which the out-of-tree driver does not appear, even though it was installed. Right now, when this problem happens, I uninstall the driver and re-install it, and then the dev/isgx shows up.

[haitaohuang]

you should see errors in kernel log when you install isgx.ko and /dev/isgx not showing up.