Enabling the Intel Software Guard Extensions (SGX)

Use this task to create a protected region of memory that is accessible only by certain authorized functions. Enable this feature only if you have the appropriate Intel driver on your OS. This feature is disabled by default.

The first time you use this feature, set SGX to Enabled. Even if you plan to use Software Controlled, set SGX to Enabled until you complete the necessary steps in the OS for the Intel drivers. Set SGX to Software Controlled after you have configured your Intel drivers in the OS.

  1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration (RBSU) > System Options > Processor Options > Intel Software Guard Extensions (SGX) and press Enter.
  2. Select a setting and press Enter.
    1. Enabled
    2. Disabled
    3. Software Controlled - Enabling or disabling of SGX is determined by the Intel drivers, which can be configured in the OS.

    If you select Enabled or Software Controlled, more configuration options are displayed:

    • Select Owner EPOCH input type

    • PRMRR Size

  3. Press F10.