3 ms·
Anybody know why SGX installs additional service(s) in the system, and how they are used/what they are needed for? There is "Intel SGX AESM" with the descriptio
by mehrdadn 8y ago
Anybody know why SGX installs additional service(s) in the system, and how they are used/what they are needed for? There is "Intel SGX AESM" with the description "The system services management agent for Intel(R) Software Guard Extensions enabled applications", but I don't get what exactly it manages and how it can be used to manage that. Where/how does it come into play?
- thinkmoore 8y agoVarious components of the SGX system (launch approval, remote attestation quote signing, etc) are implemented as Intel provided enclaves. AESM manages those enclaves and provides an untrusted API to communicate with them.
- mehrdadn 8y agoInteresting, thanks!