The Open Enclave SDK runs on Linux systems, whether those systems are inside virtual machines or directly on top of the bare metal machines. The Open Enclave feature set exposed on a system varies on the SGX support level requested and available. Currently, the Open Enclave SDK implementation supports three different SGX support levels. This is explained in next section.
The SDK setup process for each mode has minor differences. Since these differences are not fully compatible between modes, it is imperative for a user to know the SGX support level on their target system to ensure the correct SDK setup.
Please refer to the following documentation to determine the SGX support level for your target system.
Open Enclave today supports the following three operation modes -
-
SGX1: This mode can handle all the generic SGX features. -
SGX1+FLC: In this mode, the Open Enclave SDK takes advantage of the Flexible Launch Control mode for better managing architectural enclaves. -
Simulation: Open Enclave comes with an SGX software simulation mode that simulates a subset of the SGX feature set. This simulator enables the Open Enclave SDK to run on systems without actual SGX hardware support.
Different Open Enclave operating modes require different SGX support levels.
| Open Enclave operation mode | SGX support level needed to run on |
|---|---|
| SGX1+FLC | SGX1+FLC |
| SGX1 | SGX1 or SGX1+FLC |
| Simulation | Any level |
On Linux, if your target system does not have any SGX hardware support, you may want to choose simulation.
On Windows, Open Enclave SDK does not support simulation mode.
Choose an operating mode that is compatible with the SGX support level of your target system. The links below contain instructions on how to set up Open Enclave SDK environment for a given mode.
On Linux:
- Setup Open Enclave SDK for SGX1+FLC
- Setup Open Enclave SDK for SGX1
- Setup Open Enclave SDK for simulation mode
On Windows:
- Set up Open Enclave SDK for SGX1+FLC
- Set up Open Enclave SDK for SGX1
- Simulation mode is not supported on Windows
Assuming you install the SDK as below (also described in the basic install section)
cmake -DCMAKE_INSTALL_PREFIX=~/openenclave ..
make installOpen Enclave samples can be found in ~/openenclave/share/openenclave/samples
See Open Enclave samples for details.
Assuming you install the SDK as below (also described in the basic install section)
cmake .. -G Ninja -DNUGET_PACKAGE_PATH=C:\oe_prereqs -DCMAKE_INSTALL_PREFIX:PATH=C:\openenclave"
ninja installOpen Enclave samples can be found in c:\openenclave\share\openenclave\samples
See Open Enclave samples for details.
Additional information such as the API Reference and supported libs can be found here.