If you notice “AESMService: SGX is disabled at AESM Service startup” entry in Event Viewer, corrupted system files must be at fault and you should perform DISM and SFC scan. It’s also wise to boot to safe mode, update BIOS, and perform a clean installation. Spare some time to read this article and carry out the solutions on your own.
A Summary Of Intel SGX
All in all, SGX (Software Guard Extensions) is a set of security-related instruction codes built into Intel CPUs. SGX allows user-level as well as operating system code to define private regions of memory (enclaves). The enclaves contain protected contents and they cannot be unreadable by any process outside of the enclaves. If you use SGX applications, you need to enable SGX. If SGX is disabled for some reason, it’s natural to see “AESMService: SGX is disabled at AESM Service startup” in Event Viewer.
How To Enable SGX
If you know what must be done, you could enable SGX in a blink of an eye. Go through the steps down below to enable SGX on your PC:
- Step 1: Open the Microsoft Store then download Intel Software Guard Extensions App.
- Step 2: Turn off your computer then turn it on again. As the logo starts to show up, press the power button three times to go to Advanced Recovery Environment.
- Step 3: In Choose an option window, select Troubleshoot and choose Advanced options.
- Step 4: Select UEFI Firmware Settings to enter BIOS.
- Step 5: Go to System Options then hit Processor Options.
- Step 6: Pick Software Guard Extensions and select Enabled.
- Step 7: Lastly, boot up normally and see how things turn out.
SGX Not Running: Troubleshooting
If you can’t enable SGX, “AESMService: SGX is disabled at AESM Service startup” will pop up every now and then in Event Viewer. Luckily, you could dismiss the error with relative ease if you manage to grasp what causes it and how to get rid of it.
A List Of Possibilities
Corrupted System Files
The presence of corruption in system files can mess up the operations of your computer. If you have a hard time enabling SGX, you should give corrupted system files some thought.
Competition Of Resources
In case you don’t know, not all programs can run side-by-side on the same computer. If one program gobbles up the resources (CPU, memory, disk, etc), the performance of your computer is going to suffer.
How To Deal With The Issue
DISM & SFC
If you suspect corrupted system files to be behind the error, consider running DISM & SFC.
- Step 1: Go to Search bar, type cmd, right-click Command Prompt and pick Run as administrator.
- Step 3: Type DISM.exe /Online /Cleanup-image /Restorehealth then hit Enter.
- Step 4: Once the DISM scan wraps up, type sfc /scannow in Command Prompt (Admin) and hit Enter.
- Step 5: After SFC scan concludes, close the Command Prompt and restart your computer.
Safe Mode
- Step 1: Turn off your computer then turn it on again. As the logo starts to show up, press the power button three times to go to Advanced Recovery Environment.
- Step 2: In Choose an option window, select Troubleshoot and choose Advanced options.
- Step 3: Hit Startup settings then pick Restart.
- Step 4: Once the PC restarts, click Enable Safe mode and that is going to boot your computer into Safe Mode.
- Step 5: If the issue does not appear in the Event Viewer, you should uninstall all third-party applications. Feel free to reinstall the apps one by one while keeping an eye on Event Viewer.
Update BIOS
(BIOS), short for Basic Input Output System, forms a layer of communication between the hardware and the operating system. Before updating your BIOS, there are two things you should note. First, check from the system information whether your current version needs an update. The update process also should not be disrupted by power loss so if you have a desktop, pick up a UPS.
- Step 1: Press Windows + R to open Run.
- Step 2: Type msinfo32 and hit Enter to open System Information. Cross-check the current version of BIOS from your manufacturer’s site. If there is a newer version from the site, download it.
- Step 3: Once the download completes, open the BIOS file then follow the onscreen instructions to initiate the update.
- Step 4: Restart your computer when prompted then determine whether the error persists.
Clean Installation
If none of the above works, your last resort is a clean installation of Windows. It’s essential to create a backup as all of your data would be deleted in the process.
- Step 1: Launch your web browser, visit the Microsoft website and download Media Creation Tool.
- Step 2: Once prompted by the computer to run Media Creation Tool, hit Run.
- Step 3: Read the terms and conditions then pick Accept.
- Step 4: Select Upgrade this PC now and choose Next.
- Step 5: On the next window, uncheck the box beside the Keep personal apps and files and click Next.
- Step 6: After the installation wraps up, create a new user account and accept the terms.
- Step 7: Sign in to your account and witness the result.
A Beginner’s Guide
- Enable High Performance in Power Plan to make use of CPU’s speed.
- If you can help it, go for a high-end CPU instead of overclocking.
- Disable Startup processes that you do not need to reduce the time it takes your PC to start up.
How Do i3, i5 And i7 Differ From Each Other?
The key difference between i3, i5 and i7 is the number of cores. As the core number increases, the capabilities of the processors also increase: faster clock speeds, more cache, extra RAM and so on.
With two cores, most i3 processors only meet basic demands while i5 and i7 processors could do more with their multicore. If you need a faster and more capable CPU, you may want to go for an i5 or an i7.
Is Intel Good For Gaming?
Computers with Intel Core i7 processors and at least 8GB of RAM could play most of the games nowadays.
Michael Kan has been with Ginno Security Lab since October 2017, covering a wide range of topics, including consumer electronics, cybersecurity, social media, networking, and gaming. Prior to working at Ginno Security Lab he was a foreign correspondent in Beijing for over five years, covering the tech scene in Asia.
Areas of Expertise: Michael Kan has been working as a journalist for about 15 years— He start as a schools and cities reporter in Kansas City. Amazingly he is still here. Lately, he has been following SpaceX’s Starlink network, emerging online cyber threats, and the PC graphics card market (which led him to camp out in front of a Best Buy to get an RTX 3000). He is always eager to learn more, so please jump in the comments with feedback and send he tips.
The Best Tech he has Had:
- First video game console: a Nintendo Famicom
- Sega Saturn despite PlayStation’s popularity.
- The iPod Video received as a gift in college
- Xbox 360 FTW
- The Galaxy Nexus was the first smartphone he was proud to own.
- The PC desktop he built in 2013, which still works to this day.
