156aec7 Oct 8, 2018
1 contributor

Users who have contributed to this file

59 lines (44 sloc) 3.47 KB

Install the Open Enclave SDK

Platform requirements

1. Configure the Intel and Microsoft APT Repositories

echo 'deb [arch=amd64] xenial main' | sudo tee /etc/apt/sources.list.d/intel-sgx.list
wget -qO - | sudo apt-key add -

echo "deb llvm-toolchain-xenial-7 main" | sudo tee /etc/apt/sources.list.d/llvm-toolchain-xenial-7.list
wget -qO - | sudo apt-key add -

echo "deb [arch=amd64] xenial main" | sudo tee /etc/apt/sources.list.d/msprod.list
wget -qO - | sudo apt-key add -

2. Install the prerequisite packages

sudo apt-get update
sudo apt-get -y install clang-7 libssl-dev make gcc gdb g++ pkg-config

3. Install the Intel SGX DCAP Driver

wget -O sgx_linux_x64_driver.bin
chmod +x sgx_linux_x64_driver.bin
sudo ./sgx_linux_x64_driver.bin

The Intel SGX DCAP driver currently needs to be re-installed when the Ubuntu kernel is updated.

4. Install the Intel and Open Enclave packages

sudo apt-get -y install libsgx-enclave-common libsgx-enclave-common-dev libsgx-dcap-ql libsgx-dcap-ql-dev az-dcap-client open-enclave

This step also installs the az-dcap-client package which is necessary for performing remote attestation in Azure. A general implementation for using Intel DCAP outside the Azure environment is coming soon.

As a convenience, you can download and run the install-open-enclave-stack on your target device, which executes all of the above steps.

The packages are also available for download directly:

5. Verify the Open Enclave SDK install

See Using the Open Enclave SDK for verifying and using the installed SDK.