Lenovo ThinkPad P50 works

[jkuroda]

Confirmed: Lenovo ThinkPad P50 laptops have BIOS support for SGX with SGX-enabled CPUs.

• 
• 
• 

Likely: Lenovo ThinkPad P70, P50S, T560, T460p, T460s, T460 laptops as well based on user manuals:

• https://download.lenovo.com/pccbbs/mobiles_pdf/p70_ug_en.pdf#page=95
• https://download.lenovo.com/pccbbs/mobiles_pdf/p50_ug_en.pdf#page=96
• https://download.lenovo.com/pccbbs/mobiles_pdf/t560_p50s_ug_en.pdf#page=100
• https://download.lenovo.com/pccbbs/mobiles_pdf/t460_ug_en.pdf#page=103
• https://download.lenovo.com/pccbbs/mobiles_pdf/t460p_ug_en.pdf#page=95
• https://download.lenovo.com/pccbbs/mobiles_pdf/t460s_ug_en.pdf#page=92

[bl4ck5un]

#8 Confirmed T460s

[ayeks]

Thanks for your contribution and the screenshots!

Does someone know how SGX can be activated via software? In my understanding it is not possible to modify the MSR.IA32_Feature_Control.SGX_Enable bit once the MSR lock bit is set. That happens when the BIOS boots the system. Does someone has more information about that or can paste the output of the test-sgx.c tool with activated sofware controlled SGX?

[jkuroda]

test-sgx-enabled.txt
test-sgx-sw_controlled.txt

With "Software Controlled", the driver loads, but it also reports that "CPU does not support the SGX 1.0 instruction set".
With "Enabled", the driver loads and reports the expected EPC messages.

Have not had a chance to explore further.