Share via

IMAGE_ENCLAVE_CONFIG64 structure

  • Article

Defines the format of the enclave configuration for systems running 64-bit Windows.

Syntax

typedef struct _IMAGE_ENCLAVE_CONFIG64 {
  ULONG     Size;
  ULONG     MinimumRequiredConfigSize;
  ULONG     PolicyFlags;
  ULONG     NumberOfImports;
  ULONG     ImportList;
  ULONG     ImportEntrySize;
  UCHAR     FamilyID[IMAGE_ENCLAVE_SHORT_ID_LENGTH];
  UCHAR     ImageID[IMAGE_ENCLAVE_SHORT_ID_LENGTH];
  ULONG     ImageVersion;
  ULONG     SecurityVersion;
  ULONGLONG EnclaveSize;
  ULONG     NumberOfThreads;
  ULONG     EnclaveFlags;
} IMAGE_ENCLAVE_CONFIG64, *PIMAGE_ENCLAVE_CONFIG64;

Members

  • Size
    The size of the IMAGE_ENCLAVE_CONFIG64 structure, in bytes.

  • MinimumRequiredConfigSize
    The minimum size of the IMAGE_ENCLAVE_CONFIG64 structure that the image loader must be able to process in order for the enclave to be usable. This member allows an enclave to inform an earlier version of the image loader that the image loader can safely load the enclave and ignore optional members added to IMAGE_ENCLAVE_CONFIG64 for later versions of the enclave. If the size of IMAGE_ENCLAVE_CONFIG64 that the image loader can process is less than MinimumRequiredConfigSize, the enclave cannot be run securely.

    If MinimumRequiredConfigSize is zero, the minimum size of the IMAGE_ENCLAVE_CONFIG64 structure that the image loader must be able to process in order for the enclave to be usable is assumed to be the size of the structure through and including the MinimumRequiredConfigSize member.

  • PolicyFlags
    A flag that indicates whether the enclave permits debugging.

    Value Meaning
    IMAGE_ENCLAVE_POLICY_DEBUGGABLE 0x00000001

    The enclave permits debugging.
    0x00000000

    The enclave does not permit debugging.

     

  • NumberOfImports
    The number of images in the array of images that the ImportList member points to.

  • ImportList
    The relative virtual address of the array of images that the enclave image may import, with identity information for each image.

  • ImportEntrySize
    The size of each image in the array of images that the ImportList member points to.

  • FamilyID
    The family identifier that the author of the enclave assigned to the enclave.

  • ImageID
    The image identifier that the author of the enclave assigned to the enclave.

  • ImageVersion
    The version number that the author of the enclave assigned to the enclave.

  • SecurityVersion
    The security version number that the author of the enclave assigned to the enclave.

  • EnclaveSize
    The expected virtual size of the private address range for the enclave, in bytes.

  • NumberOfThreads
    The maximum number of threads that can be created within the enclave.

  • EnclaveFlags
    A flag that indicates whether the image is suitable for use as the primary image in the enclave.

    Value Meaning
    IMAGE_ENCLAVE_FLAG_PRIMARY_IMAGE 0x00000001

    The image is suitable for use as the primary image in the enclave.
    0x00000000

    The image is not suitable for use as the primary image in the enclave.

     

Remarks

The IMAGE_ENCLAVE_CONFIG structure is defined as another name for the IMAGE_ENCLAVE_CONFIG64 structure on systems that run 64-bit Windows.

Requirements

Minimum supported client

Windows 10, version 1709 [desktop apps only]

Minimum supported server

Windows Server 2016 [desktop apps only]

Header

 Winnt.h

See also

IMAGE_ENCLAVE_CONFIG32