# Secretd init-enclave --reset - sw hardening needed?

**URL:** <https://forum.scrt.network/t/secretd-init-enclave-reset-sw-hardening-needed/2187>\
**Category:** Developer Help\
**Created:** [October 10, 2020, 3:41pm UTC](https://forum.scrt.network/t/secretd-init-enclave-reset-sw-hardening-needed/2187 "2020-10-10T15:41:29Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![syck](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.scrt.network/syck/32/441_2.png) [@syck](https://forum.scrt.network/u/syck)\
**Post date:** [October 10, 2020, 3:41pm UTC](https://forum.scrt.network/t/secretd-init-enclave-reset-sw-hardening-needed/2187/1 "2020-10-10T15:41:29Z")

</div>

hi,

I’m very confused about init-enclave sw hardening error.

Hyperthreading is switched to “Disabled” and no option available for overclocking/underclocking.

hw: Lenovo x1 extreme gen1, BIOS is patched ([https://support.lenovo.com/sa/en/product\_security/len-29846](https://support.lenovo.com/sa/en/product_security/len-29846))

“ERROR [wasmi\_runtime\_enclave::registration::cert] Platform is updated but requires further BIOS configuration  
ERROR [wasmi\_runtime\_enclave::registration::cert] The following vulnerabilities must be mitigated: [“INTEL-SA-00161”, “You must disable hyperthreading in the BIOS”, “INTEL-SA-00289”, “You must disable overclocking/undervolting in the BIOS”]  
Platform status is SW\_HARDENING\_AND\_CONFIGURATION\_NEEDED. This means is updated but requires further BIOS configuration”

What’s happening? Wrong kernel, wrong sgx kernel module, wrong bios, wrong intel api calls or I just missed some BIOS option?

root@x1e:~# sgx-detect --verbose  
Detecting SGX, this may take a minute…  
✔ SGX instruction set  
✔ CPU support  
✔ CPU configuration  
✔ Enclave attributes  
✔ Enclave Page Cache  
SGX features  
✘ SGX2 ✘ EXINFO ✘ ENCLV ✘ OVERSUB ✘ KSS  
Total EPC size: 93.5MiB  
✘ Flexible launch control  
✔ CPU support  
✔ CPU configuration  
✘ Able to launch production mode enclave  
✔ SGX system software  
✔ SGX kernel device (/dev/isgx)  
✔ libsgx\_enclave\_common  
✔ AESM service  
✔ Able to launch enclaves  
✔ Debug mode  
✘ Production mode  
✔ Production mode (Intel whitelisted)

🕮 SGX system software \> Able to launch enclaves \> Production mode  
The enclave could not be launched. This might indicate a problem with FLC.

debug: failed to load report enclave  
debug: cause: failed to load report enclave  
debug: cause: The EINITTOKEN provider didn’t provide a token  
debug: cause: aesm error code GetLicensetokenError\_6

More information: [https://edp.fortanix.com/docs/installation/help/#run-enclave-prod](https://edp.fortanix.com/docs/installation/help/#run-enclave-prod)

You’re all set to start running SGX programs!

root@x1e:~# uname -a  
Linux x1e 5.4.0-48-generic #52~18.04.1-Ubuntu SMP Thu Sep 10 12:50:22 UTC 2020 x86\_64 x86\_64 x86\_64 GNU/Linux

any ideas?

---

<div class="post-metadata">

**Author:** ![toml](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.scrt.network/toml/32/447_2.png) [@toml](https://forum.scrt.network/u/toml)\
**Post date:** [October 11, 2020, 10:09am UTC](https://forum.scrt.network/t/secretd-init-enclave-reset-sw-hardening-needed/2187/2 "2020-10-11T10:09:32Z")

</div>

Can you share output of: `sudo dmidecode -s bios-version` ?

---

<div class="post-metadata">

**Author:** ![syck](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.scrt.network/syck/32/441_2.png) [@syck](https://forum.scrt.network/u/syck)\
**Post date:** [October 11, 2020, 10:23am UTC](https://forum.scrt.network/t/secretd-init-enclave-reset-sw-hardening-needed/2187/3 "2020-10-11T10:23:49Z")

</div>

sure

syck@x1e:~$ sudo dmidecode -s bios-version  
N2EET49W (1.31 )

---

<div class="post-metadata">

**Author:** ![toml](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.scrt.network/toml/32/447_2.png) [@toml](https://forum.scrt.network/u/toml)\
**Post date:** [October 11, 2020, 10:41am UTC](https://forum.scrt.network/t/secretd-init-enclave-reset-sw-hardening-needed/2187/4 "2020-10-11T10:41:19Z")

</div>

It is the latest one.  
You linked a security advisory that only refers to `INTEL-SA-00289`.  
Looking at [this advisory](https://support.lenovo.com/us/en/solutions/LEN-24163) (`INTEL-SA-00161`) which refers to [this one](https://support.lenovo.com/us/en/solutions/LEN-24163), your model doesn’t appear on the list. This maybe means there’s no patch released for your model yet?

---

<div class="post-metadata">

**Author:** ![toml](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.scrt.network/toml/32/447_2.png) [@toml](https://forum.scrt.network/u/toml)\
**Post date:** [October 11, 2020, 10:47am UTC](https://forum.scrt.network/t/secretd-init-enclave-reset-sw-hardening-needed/2187/5 "2020-10-11T10:47:46Z")

</div>

Other than that, may I ask why are you trying to run a node from a laptop? If it is for dev purposes, I’d advise you to run in software mode. Easiest way will be to use our [docker image](https://hub.docker.com/r/enigmampc/secret-network-sw-dev)