Technologies for provisioning and managing secure launch enclave with platform firmware

A method for configuring a launch enclave, the method comprising:

• storing, by a trusted execution environment of a computing device, a launch enclave hash in a launch enclave hash table in a secure storage of the computing device;
• provisioning, by the trusted execution environment, the launch enclave hash to a platform firmware of the computing device;
• setting, by the platform firmware, a configure enclave launch bit in response to provisioning the launch enclave hash to the platform firmware;
• resetting, by the platform firmware, the computing device in response to setting the configure enclave launch bit;
• determining, by the trusted execution environment, whether the launch enclave hash is allowed for launch in response to setting the configure enclave launch bit and resetting the computing device;
• and
• writing, by the platform firmware, the launch enclave hash to a launch enclave model-specific register of a processor of the computing device in response to determining that the launch enclave hash is allowed for launch.

One or more non-transitory, computer-readable storage media comprising a plurality of instructions that in response to being executed cause a computing device to:

• store, by a trusted execution environment of the computing device, a launch enclave hash in a launch enclave hash table in a secure storage of the computing device;
• provision, by the trusted execution environment, the launch enclave hash to a platform firmware of the computing device;
• set, by the platform firmware, a configure enclave launch bit in response to provisioning the launch enclave hash to the platform firmware;
• reset, by the platform firmware, the computing device in response to setting the configure enclave launch bit;
• determine, by the trusted execution environment, whether the launch enclave hash is allowed for launch in response to setting the configure enclave launch bit and resetting the computing device;
• and
• write, by the platform firmware, the launch enclave hash to a launch enclave model-specific register of a processor of the computing device in response to determining that the launch enclave hash is allowed for launch.