SGX-TCB-01: Intel rates the platform's TCB as acceptable

Property	Value
Severity	high
Platform	Intel SGX fleets
Lifecycle stage	hardware
Policy	P-08: Hosts run firmware at or above the fleet minimum
Evaluated from	Evidence sent to the service (collector bundles or registry scans), not from a cloud API scan.

What it checks

It passes when:

• Intel's TCB status (…) for this platform and Quoting Enclave is accepted by the fleet.

How to fix

• Apply the BIOS/microcode updates named in the listed Intel advisories, or accept the status in the fleet policy once the advisories are mitigated in software.

After the fix, scan again: the check should report PASS.

Related

• Other checks for policy P-08: CCA-FW-01, GPU-FW-01, SNP-TCB-01, TDX-TCB-01

Generated from untrust 1.3.0 (commit 7ef462d9a0c3).