How to Enable and Disable Intel SGX from the OVHcloud Manager

Intel SGX delivers advanced hardware security encryption features in order to isolate parts of code and data that are specific to each application. In this article, we will cover how to enable and disable SGX from the OVHcloud Manager.

Note: SGX is available on the INFRA-1 and INFRA-2 servers.

Topics

• Enabling SGX in the OVHcloud Manager
• Disabling SGX in the OVHcloud Manager

Enabling SGX in the OVHcloud Manager

To enable SGX, first log into the OVHcloud Manager. Click Server at the top of the page and then select the server on which you wish to enable SGX from the left-hand sidebar. Scroll down to the "Advanced features" box and click the ellipsis (...) next to "Security - Intel SGX (Software Guard Extensions)". Select Enable SGX from the drop-down menu.

On the following screen, click the Enable button.

You can either choose to enable SGX with a specific amount of reserved memory or enable it by allowing your software to automatically reserve the memory it needs. Once you have made your choice, click Confirm.

Click Confirm on the following pop-up menu. Your server will reboot, so allow a few minutes before accessing your server again.

Disabling SGX from the OVHcloud Manager

To disable SGX, navigate to the "Advanced features" box as we did in the first section and click the ellipsis (...) next to "Security - Intel SGX (Software Guard Extensions). Select Modify SGX from the drop-down menu.

 Choose the Disable option and then click Confirm.

Click Confirm on the following pop-up menu. Your server will reboot, so allow a few minutes before accessing your server again.

Conclusion

Managing SGX with OVHcloud is a seamless process that helps you manage the security of your server.