SGX-MEAS-01: Enclave identity is in the fleet's expected set

Property	Value
Severity	high
Platform	Intel SGX fleets
Lifecycle stage	hardware
Policy	P-09: Only signed images pinned to a measurement are launched
Evaluated from	Evidence sent to the service (collector bundles or registry scans), not from a cloud API scan.

What it checks

It passes when:

• MRENCLAVE, or MRSIGNER with product ID and SVN floor, matches the fleet.

How to fix

• Pin the approved enclave's MRENCLAVE or its signer (MRSIGNER) in the fleet, or investigate an unapproved enclave.

After the fix, scan again: the check should report PASS.

Related

• Other checks for policy P-09: AZ-MEAS-01, CCA-MEAS-01, CSPACE-BINAUTHZ-01, CSPACE-IMG-01, CSPACE-IMG-02, GPU-RIM-01, REG-PROV-01, REG-SIG-01, REG-SIG-02, SE-MEAS-01, SNP-MEAS-01, TDX-MEAS-01

Generated from untrust 1.3.0 (commit 7ef462d9a0c3).