chipsec.modules.common.sgx_check module

Check SGX related configuration

Reference:

• SGX BWG, CDI/IBP#: 565432

Usage:

chipsec_main -m common.sgx_check

Examples:

>>> chipsec_main.py -m common.sgx_check

Registers used:

• IA32_FEATURE_CONTROL.SGX_GLOBAL_EN

• IA32_FEATURE_CONTROL.LOCK

• IA32_DEBUG_INTERFACE.ENABLE

• IA32_DEBUG_INTERFACE.LOCK

• MTRRCAP.PRMRR

• PRMRR_VALID_CONFIG

• PRMRR_PHYBASE.PRMRR_base_address_fields

• PRMRR_PHYBASE.PRMRR_MEMTYPE

• PRMRR_MASK.PRMRR_mask_bits

• PRMRR_MASK.PRMRR_VLD

• PRMRR_MASK.PRMRR_LOCK

• PRMRR_UNCORE_PHYBASE.PRMRR_base_address_fields

• PRMRR_UNCORE_MASK.PRMRR_mask_bits

• PRMRR_UNCORE_MASK.PRMRR_VLD

• PRMRR_UNCORE_MASK.PRMRR_LOCK

• BIOS_SE_SVN.PFAT_SE_SVN

• BIOS_SE_SVN.ANC_SE_SVN

• BIOS_SE_SVN.SCLEAN_SE_SVN

• BIOS_SE_SVN.SINIT_SE_SVN

• BIOS_SE_SVN_STATUS.LOCK

• SGX_DEBUG_MODE.SGX_DEBUG_MODE_STATUS_BIT

Note

• Will not run within the EFI Shell