Hey team, I’m having an issue registering my node after the 1.25.0 upgrade and I believe it’s caused by an invalid PCK certificate being served by your PCCS for my platform.
The problem:
Your PCCS (pccs.scrtlabs.com) is serving an invalid PCK certificate for my platform’s FMSPC 30606A000000 (Intel Xeon Silver 4314, Ice Lake). When using your PCCS, DCAP quote
verification fails with SGX_ERROR_UNEXPECTED / “The provided certificate was invalid”. Switching to Intel’s PCS directly resolves the issue
Because of this, I can’t generate a valid attestation using your PCCS, so I can’t get my registered machine ID back:
-
Registered machine ID (via scrtlabs PCCS): b4cdc2e6620dfd8c5d565041284714c38079c74c
Known -
Machine ID via Intel PCS: 75d521f1ce4a826d3ee44cecf0b087003235cef1
Not known — chain rejects registration
The ask:
Could you refresh the PCK cert for FMSPC 30606A000000 in your PCCS? Once it’s serving a valid cert for this platform, I can regenerate my attestation with the correct machine ID
and complete registration.
Happy to provide any additional diagnostics. Thanks!