Ran the sgx-ra-sample code for remote attestation based on Intel® Enhanced Privacy ID (Intel® EPID).
Elliptic Curve Digital Signature Algorithm (ECDSA) completes but EPID fails with: Error, call sgx_ra_get_msg1_ex fail [main]
Logs show that IAS responds to msg1 with PVE_PROV_ATTEST_KEY_TCB_OUT_OF_DATE (SGX_ERROR_UPDATE_REQUIRED).
Contact the BIOS manufacturer, provide them all logs and information, and work with them to receive an updated BIOS with the required fixes.
The issue is in the implementation of the BIOS by the BIOS manufacturer.