Table of Contents
Advertisement
E3C256D4I-2T
3.3.1 CPU Configuration
SGX settings
Use this item to configure SGX settings.
Software Guard Extensions (SGX)
Use this item to enable or disable Software Controlled Software Guard Extensions (SGX).
When this is enabled, you will see the following items.
Select Owner EPOCH input type (SGX)
There are three Owner EPOCH modes (Each EPOCH is 64bit): no change in owner epoch,
change to new random owner epoch and manually entered by user. After generating new
epoch via 'Change to New Random Owner EPOCHs', the selection reverts back to 'No
Change in Owner Epochs', this is to ensure Epoch stays same, across Sx states. After the
user enters epoch values manually, the values will not be visible, for security reasons.
SGX Launch Control Policy
Software Guard Extensions (SGX) Launch Control Policy.
Options are:
Intel Locked - Select Intel's Launch Enclave.
Unlocked - Enable OS/VMM configuration of Launch Enclave.
Locked - Allow owner to configure Launch Enclave.
35
Advertisement
Table of Contents
