---
title: "Enroll a Compute Node (bare metal or VM) - SGX"
slug: "users-guide-enroll-a-compute-node-bare-metal-or-vm-sgx-1"
updated: 2026-06-26T16:28:06Z
published: 2026-06-26T16:28:06Z
canonical: "support.fortanix.com/users-guide-enroll-a-compute-node-bare-metal-or-vm-sgx-1"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.fortanix.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Enroll a Compute Node (bare metal or VM) - SGX

## 1.0 Introduction

This article describes how to enroll a compute node using bare metal or VM on an SGX platform.

## 2.0 Enroll a Compute Node (bare metal or VM) - SGX

### 2.1 Ubuntu 24.04 Node Agent

*Refer to* [*Download Ubuntu Node Agent Installer - SGX*](https://fortanix.zendesk.com/hc/en-us/articles/360043407012-Fortanix-Node-Agent-Software-Intel-SGX-Platform) *to download the latest Ubuntu Node Agent installer.*

> [!NOTE]
> NOTE
> 
> Ensure the Fortanix node agent software version for SGX is 4.9 or later.

Perform the following steps:

1. Extract the content of the `Node-Agent-Installer.tar.gz` package and open the folder.
2. Open the `INSTALLER_README.md` file containing the steps to enroll the compute node in Fortanix CCM.

![nodeagentinstaller.png](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/4414195283092.png)

**Figure 1: INSTALLER_README**

The `INSTALLER_README.md` has the steps to enroll a compute node in Fortanix CCM.
3. Fortanix supports any SGX capable server nodes.
4. Ensure that applications on the node are allowed to make local connections to the Node Agent on port 9092.

> [!WARNING]
> WARNING
> 
> Ports do not accept remote connections as a best practice. So, do not allow remote connections to the node agent.

Perform the following steps to enroll the Ubuntu 24.04 compute node in Fortanix CCM:

1. Copy the file `installer.sh` to the VM.
2. Run the `installer.sh` using the command:

```bash
sudo bash installer.sh  --attestation-type=<attestation-type>
```

> [!NOTE]
> NOTE
> 
> - Where `&lt;attestation-type&gt;` is `DCAP`.
> - It is strongly recommended to use the DCAP attestation while installing the node agent on an Azure VM.

## 3.0 Generating Join Token

Perform the following steps to generate a join token in Fortanix CCM:

1. Log in to [https://ccm.fortanix.com.](https://ccm.fortanix.com.)
2. Click the **Infrastructure → Compute Nodes** menu item, and then click **+ ADD NODE**.

![](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/Screenshot (3612)(5).png)

**Figure 2: Enroll Compute Node**
3. In the **ENROLL COMPUTE NODE** window, a Join Token will be generated in the text box for "**Get a join token to register an SGX compute node**". This Join Token is used by the compute node to authenticate itself.

![](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/Screenshot (3610)(1).png)

**Figure 3: Join Token Generated**
4. Click **COPY** to copy the Join Token.

## 4.0 Validating the Enrolled Compute Node

After the compute node is enrolled in Fortanix CCM, you will see it under the **Compute Nodes** overview table.

![](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/Screenshot (3613) - Copy.png)

**Figure 4: Enrolled Node**

## Related

- [Enroll a Compute Node Using AWS Nitro on Amazon Linux](/fortanix-ccm-enroll-a-compute-node-using-aws-nitro-on-amazon-linux.md)
- [Sequoia-PGP](/fortanix-dsm-clients-sequoia-pgp.md)
- [Fortanix DSM - Quickstart](/fortanix-data-security-manager-quickstart.md)