Skip To Main Content
Support Knowledge Base

Unable to Enable Intel® Software Guard Extensions (Intel® SGX) in BIOS or via Software Applications

Content Type: Product Information & Documentation   |   Article ID: 000057603   |   Last Reviewed: 10/27/2021

Description

Resolution

Processor support is not enough to have a fully Intel SGX–enabled system.

Four conditions must be met for Intel SGX to be enabled on a system:

  1. The processor must support Intel SGX.
  2. The BIOS must support Intel SGX and expose the SGX configuration setting. The Intel SGX setting must be either Enabled or Software Controlled.
  3. The Intel SGX Platform Software (PSW) package must be installed.
  4. An application must enable Intel SGX if Intel SGX is set to Software Controlled in BIOS.

Additional information

Contact the motherboard vendor or original equipment manufacturer (OEM) for guidance on exposure and location of Intel® Software Guard Extensions (Intel® SGX) settings in the BIOS.

It is the responsibility of the BIOS manufacturer to expose Intel® Software Guard Extensions (Intel® SGX) settings in the BIOS.

Refer to Properly Detecting Intel® Software Guard Extensions (Intel® SGX) in Your Applications for a full explanation of detecting and enabling Intel SGX on a platform using Intel SGX Software Development Kit commands.