Table of Contents
Advertisement
Chapter 4: UEFI BIOS
Select Owner EPOCH input type (Available when "SW Guard Extensions (SGX)" is
set to Enabled)
Owner EPOCH is used as a parameter to allow the owner to add entropy to the keys during
the derivation. Use this feature to select the two Owner EPOCH modes. One is New Random
Owner EPOCH , the other is manually entered. Each EPOCH is 64-bit. The options are
Change to New Random Owner EPOCHs and Manual User Defined Owner EPOCHs.
Note: Changing the Owner EPOCH Value will lose the data in enclaves.
Software Guard Extensions Epoch 0 (Available when "SW Guard Extensions (SGX)"
is set to Enabled and "Select Owner EPOCH input type" is set to Manual User
Defined Owner EPOCHs)
Enter a numeric value for this feature. The default is 0.
Software Guard Extensions Epoch 1 (Available when "SW Guard Extensions (SGX)"
is set to Enabled and "Select Owner EPOCH input type" is set to Manual User
Defined Owner EPOCHs)
Enter a numeric value for this feature. The default is 0.
SGXLEPUBKEYHASHx Write Enable (Available when "SW Guard Extensions (SGX)"
is set to Enabled)
Use this feature to write SGX LE Public Key Hash 0-3 from OS/SW. The options are Disabled
and Enabled.
SGXLEPUBKEYHASH0 (Available when both "SW Guard Extensions (SGX)" and
"SGXLEPUBKEYHASHx Write Enable" are set to Enabled)
Use this feature to enter the bytes 0-7 of SGX Launch Enclave Public Key Hash.
SGXLEPUBKEYHASH1 (Available when both "SW Guard Extensions (SGX)" and
"SGXLEPUBKEYHASHx Write Enable" are set to Enabled)
Use this feature to enter the bytes 8-15 of SGX Launch Enclave Public Key Hash.
SGXLEPUBKEYHASH2 (Available when both "SW Guard Extensions (SGX)" and
"SGXLEPUBKEYHASHx Write Enable" are set to Enabled)
Use this feature to enter the bytes 16-23 of SGX Launch Enclave Public Key Hash.
SGXLEPUBKEYHASH3 (Available when both "SW Guard Extensions (SGX)" and
"SGXLEPUBKEYHASHx Write Enable" are set to Enabled)
Use this feature to enter the bytes 24-31 of SGX Launch Enclave Public Key Hash.
SGX Auto MP Registration (Available when "SW Guard Extensions (SGX)" is set to
Enabled)
Use this feature to enable/disable SGX Auto Multi-Package Registration Agent (MPA) running
automatically at boot time. The options are Disabled and Enabled.
73
Advertisement
Table of Contents
