On 8/23/22 06:48, Paul Menzel wrote: >>> I'm suspecting either a BIOS problem. Reinette (cc'd) also thought this >>> might be a case of the SGX initialization getting a bit too far along >>> when it should have been disabled. >>> >>> We had some bugs where we didn't stop fast enough after spitting out the >>> "SGX Launch Control is locked..." errors. > > Let’s hope it’s something known to you. Thanks for the extra debug info. Unfortunately, nothing is really sticking out as an obvious problem. The EREMOVE return codes would be interesting to know, as well as an idea what the physical addresses are that fail and the _counts_ of how many pages get sanitized versus fail. But, I don't really have a theory about what could be going on yet.