INTEL-DOC-10004

This Intel Doc ID can appear in the Advisory ID array of a TCB Info structure in only one case:  

  • It is the first/oldest listed TCB Level for this platform (identified by the FMSPC), and 

  • Intel updated certain components in the TCB between initial tests of this platform and the Production Validated (PV) milestone of this platform. 

If you see this Intel Doc ID during attestation of your platform, your platform is “OutOfDate”, because certain TCB components are below the TCB Level at Production Validated (PV) milestone. In this case, at least one of your platform’s TCB components requires an update. Please follow the below instructions to update your platform. 

Intel Recommendation 

If you own or control the infrastructure, deploy the latest PV milestone (or later, if available) Best-Known Configuration (BKC) kit from Intel. Following this, re-register the platform (either directly with the Intel® SGX Registration Service or indirectly with the Intel® Provisioning Certification Service (Intel® PCS)), download new platform Provisioning Certification Key (PCK) certificates from Intel PCS and store them in your provisioning certification caching service or another collateral caching service. Quote generation should now be re-enabled and the most current TCB level should be reflected when the updated PCK certificates are used.  

If you do not own or control the infrastructure, contact your provider for additional guidance.