The Intel SGX AESM service terminated unexpectedly [Fix]

The Intel Guard Software Extension (SGX) AESM service plays a crucial role in enabling secure application execution within Intel SGX enclaves. However, a lot of users are encountering the error where the Intel® SGX AESM service is terminated unexpectedly. In this article, we are going to explore the possible causes of the issue and find solutions to resolve it effectively.

The Intel® SGX AESM service terminated unexpectedly with the  following error:
Unspecified error

What is Intel SGX AESM service?

The Intel SGX AESM is a system service that facilitates the management and operations of secure enclaves created by Intel SGX Technology. These enclaves ensure that data and code remain protected even if the Operating System or other software is compromised.

Fix the Intel SGX AESM service terminated expectedly

If the Intel SGX AESM service is terminated unexpectedly on your Windows computer, execute the solutions mentioned below:

1. Check BIOS settings
2. Restart the service
3. Update the drivers and BIOS
4. Run SFC and DISM
5. Reset your BIOS
6. Reinstall Intell SGX

Let’s get started with the troubleshooting guide.

1] Check BIOS settings

Intel SGX service can be disabled due to the system’s BIOS, or improperly configured. It’s necessary to ensure that SGX is enabled because the AESM relies on SGX to create and manage secure enclaves for sensitive computations. If Intel SGX is disabled, the process will fail stating that the service terminated, hence, we need to enable the service from the BIOS.

To do the same, follow the steps mentioned below:

1. Reboot the PC, and enter the BIOS settings by clicking common keys during the start-up.
2. Once the BIOS interface opens up, navigate to the Advanced or System Configuration, the name may vary according to the motherboard manufacturer, and find the Intel SGX option.
3. Set the option to Enabled, save the changes, and exit the BIOS.

Let the system restart, and check whether the issue persists. If it does, see the next solution.

2] Restart the service

If the service terminates unexpectedly due to system errors, conflicts, or improper   configuration, users can manually restart the service:

1. Click Win + R to open the Run dialog box, type services.msc, and hit OK.
2. In the Services window, scroll down to look for Intel (R) SGX AESM service, and right-click on it.
3. Click the Restart option, however, if it is not running, select the Start button. Moreover, users can ensure that the service automatically starts on boot by right-clicking the service and selecting Properties. In the startup type dropdown, set it to Automatic, and then click Apply and OK.

Move to the next solution if the issue persists.

3] Update the drivers

Outdated or corrupted drivers are also one of the root causes, as they may not support the latest security protocols, leading to conflicts and unexpected termination of the service. Follow the steps mentioned below to update the drivers:

1. Click Win+Ito open Windows Settings, and go to the Windows Update tab.
2. Click on the Advanced options, and select the Options Updates menu.
3. Expand the Drivers updates section, check the tickbox, and click the Download & install button.

Alternatively, use a free Driver Updater Software or download it from the manufacturer’s website.

4] Update BIOS

Furthermore, it’s necessary to keep the BIOS up to date as well. However, make sure to have a power backup while upgrading the BIOS to ensure that it doesn’t get corrupted if the computer shuts down during the process. Follow the steps mentioned below to update BIOS.

1. Navigate to the manufacturer’s official website, and identify your product using the help of the Service Tag or serial number.
2. Look for the latest version of the BIOS, and download it.
3. Once done, run the installation media, the system will automatically reboot and install the update.

Enter the BIOS to verify the updated version, and check and reconfigure BIOS settings if necessary.

4] Run SFC and DISM

Corrupted or missing system files can disrupt the functioning of Intel SGX AESM services. In such a scenario, we recommend running System File Checker, and DISM command to scan for corrupted files and automatically replace them.

1. Open the Command Prompt as an admin and execute the following command to run the System File Checker:

   sfc /scannow

2. Let the process complete, and once done, reboot the PC, and check if the issue continues.
3. If the problem continues, execute the DISM command mentioned below:

   DISM /Online /Cleanup-Image /RestoreHealth

See the next solution if the service is still not back to its normal functioning.

5] Reset the BIOS

Another cause for unexpected termination can be misconfigured or outdated BIOS settings. We are going to reset the BIOS to its factory default, therefore eliminating interference from any erroneous configuration.

1. Restart the device and press the key to enter the BIOS setup.
2. Click the F9 key to display a blue screen that says ‘Load Setup defaults?’ and hit the Yes button to restore the default BIOS settings. Alternatively, users can navigate to the Exit tab or Security tab and look for options like Load Setup defaults, or restore default.
3. Select the option, and hit the Yes button when prompted. Save the changes, and exit the BIOS.

The system will reboot with the default BIOS settings applied.

6] Reinstall Intell SGX

Lastly, if the issue isn’t resolved, we recommend reinstalling Intell SGX to refresh the associated drivers, libraries, and services files. Reinstall the current version, then navigate to the Intel official website or the support page for the device’s manufacturer and install the latest software.

Read: Intel XTU Core Voltage offset greyed out

Can I disable Intel SGX AESM service?

Yes, it is possible to disable the Intel SGX AESM service, however, it’s not a recommended move since doing so may affect the functionality of the apps that rely on Intel SGX for secure enclave operations.

Also Read: Client License Service (ClipSVC) service terminated unexpectedly.