Dear Validator and node operators community,
There were some for more detail about machines that will be blocked from participating in the network after the upcoming 1.24 upgrades.
Here’s some information on the matter.
TL;DR: All Intel Xeon E-22xx and Intel Xeon E-21xx will not be able to participate. We also blocked all desktop systems from potential participation.
Deeper Dive
How do we identify CPUs? We are using the FMSPC value.
FMSPC (Family-Model-Stepping-Platform-CustomSKU) is a key identifier in Intel’s attestation infrastructure.
It encodes the processor family , model (e.g. Sapphire Rapids, Coffee Lake etc.), stepping (i.e. specific version of the design) and platform (can be Client, E3 or E5)
The FMSPC is part of the Attestation Quote.
The list of all FMSPC existing for the purposes of SGX attestation is available through this Intel API endpoint, with the Platform (E3, E5 or Desktop) stated:
https://api.trustedservices.intel.com/sgx/certification/v4/fmspcs
In this release, we are blocking two Server platform FMSPCs that correspond to Xeon E-22xx and Xeon E-21x, as well as all the Client FMSPCs
Below is the list of blocked FMSPC and the corresponding CPU families and example.
Note, that according to the info we received from Intel, they don’t offer a complete mapping from FMSPCs to specific CPUs, and the only reliable (although incomplete) source of this information from Intel is in their Platform Security Guidance page/
Using that souce, as well as cpu-world.com, we were able to compile the table below, specifying the family and some example CPUs for each FMSPC value.
Disclaimer: some information about desktop systems may not be fully accurate, but it is sufficient for our need to block any desktop systems.
| FMSPC | Platform | CPU ID | Code Names or Microarchitecture | Released | Status | Family |
|---|---|---|---|---|---|---|
| 00906EA10000 | E3 | 906EA | Coffee Lake H | 2017 | Discontinued | Xeon E-21xx, e.g. E-2186G, E-2176G, etc. |
| 00906ED50000 | E3 | 906ED | Coffee Lake S |
2018 | Discontinued | Xeon E-22xx, e.g. E-2288G, E-2278G etc. |
| 00706A100000 | Client | 706A1 | Gemini Lake (Goldmont Plus) | 2017 | Discontinued | Pentium Silver, Celeron J-series, Celeron N-series |
| 00706A800000 | Client | 706A8 | Gemini Lake | 2019 | Discontinued | Intel® Celeron® Processor J Series, Intel® Celeron® Processor N Series |
| 00706E470000 | Client | 706E4 | Ice Lake U / Ice Lake Y Mobile | 2019 | Discontinued | 10th-gen Intel Core mobile |
| 00806EA60000 | Client | 806EA | Coffee Lake U43e Whiskey Lake |
2017 | Discontinued | 8th Generation Intel® Core™ processor family |
| 00806EB70000 | Client | 806EB | Whiskey Lake U | 2018 | ESU 2026-03-31 | 8th Generation Intel® Core™ processor family |
| 20806EB70000 | Client | 806EB | Whiskey Lake U | 2018 | ESU 2026-03-31 | 8th Generation Intel® Core™ processor family |
| 00906EA50000 | Client | 906EA | Coffee Lake H | 2017 | Discontinued | 9th Generation Intel® Core™ processor family |
| 00906EB10000 | Client | 906EB | Coffee Lake S Coffee Lake Refresh |
2017 | Discontinued | 8th-gen Core i3 (Coffee Lake-S): i3-8100 / 8100T, i3-8300, i3-8350K, 9th-gen Core i3 |
| 00906EC50000 | Client | 906EC | Coffee Lake Refresh Desktop | 2019 | ESU 2026-06-30 | 9th Generation Intel® Core™ processor family |
| 00906EC10000 | Client | 906EC | Coffee Lake Refresh Desktop | 2019 | ESU 2026-06-30 | 9th Generation Intel® Core™ processor family |
| 20906EC10000 | Client | 906EC | Coffee Lake Refresh Desktop | 2019 | ESU 2026-06-30 | 9th Generation Intel® Core™ processor family |
| 00A065510000 | Client | A0655 | Comet Lake S | 2019 | Discontinued | 10th Generation Intel® Core™ Processor Family, Intel® Xeon® W processor family |
To sum up, the server CPUs that will be banned include Xeon E-22xx and Xeon E-21xx.
Also, we are preventing the possibility of any desktop CPUs to join the network as well.