Summary
How to update system to prevent provisioning errors
Description
Ran the sgx-ra-sample code for remote attestation based on Intel® Enhanced Privacy ID (Intel® EPID).
Elliptic Curve Digital Signature Algorithm (ECDSA) completes but EPID fails with: Error, call sgx_ra_get_msg1_ex fail [main]
Logs show that IAS responds to msg1 with PVE_PROV_ATTEST_KEY_TCB_OUT_OF_DATE (SGX_ERROR_UPDATE_REQUIRED).
Resolution
Contact the BIOS manufacturer, provide them all logs and information, and work with them to receive an updated BIOS with the required fixes.
Additional information
The issue is in the implementation of the BIOS by the BIOS manufacturer.