VBS Enclave Loading issue According to the VBS Enclaves development guide, Enclave Dll files in production environments require trusted signatures in order to load successfully: learn.microsoft.com/en-us/windows/win32/trusted-execution/vbs-en... We have verified through the trusted signature process in Microsoft Azure and created a Certificate Profile of VBS Enclave type: learn.microsoft.com/en-us/azure/trusted-signing/quickstart?tabs=... We downloaded the Microsoft VbsEnclave sample code from GitHub, compiled it, and signed the generated Enclave Dll file with trusted signature: Then we run the Enclave host application to load Enclave dll by LoadEnclaveImage API, but got ERROR_GEN_FAILURE （0x0000001f，A device attached to the system is not functioning.）error or ERROR_BAD_EXE_FORMAT （0x000000c1， %1 is not a valid Win32 application.）error. Please help to figure out why we got such error here, thanks.

VBS Enclave Loading issue

Ad-1048 0

VBS Enclave Loading issue

According to the VBS Enclaves development guide, Enclave Dll files in production environments require trusted signatures in order to load successfully:

learn.microsoft.com/en-us/windows/win32/trusted-execution/vbs-en...

image-20241226103557-clrrz40

We have verified through the trusted signature process in Microsoft Azure and created a Certificate Profile of VBS Enclave type:

learn.microsoft.com/en-us/azure/trusted-signing/quickstart?tabs=...

image-20241226103854-d9kzg75

We downloaded the Microsoft VbsEnclave sample code from GitHub, compiled it, and signed the generated Enclave Dll file with trusted signature:

image-20241226103940-h1m67dd

Then we run the Enclave host application to load Enclave dll by LoadEnclaveImage API, but got ERROR_GEN_FAILURE （0x0000001f，A device attached to the system is not functioning.）error or ERROR_BAD_EXE_FORMAT （0x000000c1， %1 is not a valid Win32 application.）error. Please help to figure out why we got such error here, thanks.

image-20241226104057-kqg49b1

Jeanine Zhang-MSFT 10,126 信誉分 Microsoft 供应商

2024-12-27T03:13:47.55+00:00

你好，这里是Q&A中文论坛，你可以使用中文来描述你的问题。

根据你的证书截图，有效期是2024/12/10到2024/12/13. 我建议你可以检查一下证书是否已经过期。
Ad-1048 0 信誉分

2024-12-27T03:27:40.1033333+00:00

您好，我们在测试的时候是编译后直接签名的，Azure签的受信签名有效期都是3天，截图时并没有过期。我们的Enclave文件在测试签名下是可以成功加载的，但根据官方文档描述，生产环境下Enclave Dll需要进行受信签名，目前遇到的问题是受信签名后无法成功加载。
Jeanine Zhang-MSFT 10,126 信誉分 Microsoft 供应商

2024-12-27T06:02:43.2266667+00:00

根据你的描述，问题出在了生产签名-受信任的签名的签名上。这个问题与Azure更相关。已经超出了winapi论坛的支持范围。

由于此问题很复杂，如果要尽快解决此问题，您可以通过以下链接中的“联系我们”选项卡打开一个一对一支持的付费事件：https://developer.microsoft.com/en-us/windows/support/

请针对此问题选择技术支持 - Windows SDK 编码/调试。此外，如果支持工程师确定问题是错误的结果，则服务请求将是一个免费案例，不会向您收费。

如果你想要开ticket，注意地区不要选中国。

通过

VBS Enclave Loading issue

VBS Enclave Loading issue

你的答案