SEC Device Not Found After the License Is Loaded During KAE Enablement

Symptom

KAE is enabled on two machines. After the license is successfully loaded, one machine cannot find the SEC device. After the BMC is powered off and restarted, reload the license and SEC driver. However, the PCI still cannot find the SEC device.

Key Process and Cause Analysis

1. Log in to the server iBMC, choose iBMC Settings > License Management, and check whether all accelerator devices are enabled.
2. Check whether both the KAE and TEE features are enabled on a single-socket server.

   For a single-socket server, the KAE and TEE features cannot be used simultaneously. Releasing the TEE will release the SEC device. To use the KAE SEC algorithm on a single-socket server, disable TEE.

Conclusion and Solution

Disable the TEE function on the server. Access the server BIOS, choose Advanced > TEE Config, and set TEE Config to Disable. For details, see Configuring the BIOS in the Confidential Computing TrustZone Kit Feature Guide.