1.0 Introduction
This article describes how to enroll a compute node using bare metal or VM on a SGX platform.
2.0 Enroll a Compute Node (bare metal or VM) - SGX
2.1 Ubuntu 24.04 Node Agent
Refer to Download Ubuntu Node Agent Installer - SGX to download the Ubuntu Node Agent installer.
Perform the following steps:
Extract the content of the
Node-Agent-Installer.tar.gz
package and open the folder.Open the
INSTALLER_README.md
file containing the steps to enroll the compute node in Fortanix CCM.Figure 1: INSTALLER_README
The
INSTALLER_README.md
has the steps to enroll a compute node in Fortanix CCM.Fortanix supports any SGX capable server nodes.
Ensure that applications on the node are allowed to make local connections to the Node Agent on port 9092.
WARNING
Ports do not accept remote connections as a best practice. So, do not allow remote connections to the node agent.
Perform the following steps to enroll Ubuntu 24.04 compute node in Fortanix CCM:
Copy the file
installer.sh
to VM.Run the
installer.sh
using the command:sudo bash installer.sh --attestation-type=
NOTE
Where
<attestation-type>
isDCAP
.It is strongly recommended to use the DCAP attestation while installing the node agent on azure VM.
3.0 Generating Join Token
Perform the following steps to generate a join token in Fortanix CCM:
Log in to https://ccm.fortanix.com.
Click the Infrastructure → Compute Nodes menu item, and click + ENROLL NODE on the Compute Nodes page.
Figure 2: Enroll Compute Node
In the ENROLL COMPUTE NODE window, a Join Token will be generated in the text box for "Get a join token to register an SGX compute node". This Join Token is used by the compute node to authenticate itself.
Figure 3: Join Token Generated
Click COPY to copy the Join Token.
4.0 Validating the Enrolled Compute Node
After the compute node is enrolled in Fortanix CCM, you will see it under the Compute Nodes overview table.
.png?sv=2022-11-02&spr=https&st=2025-04-04T02%3A32%3A27Z&se=2025-04-04T02%3A43%3A27Z&sr=c&sp=r&sig=3rOBuvcTsH7TI%2FbOUzfnFZ8cG1c7WgZCFcMaDnrE3cY%3D)
Figure 4: Enrolled Node