INTEL-DOC-10003

This Intel Doc ID is returned as part of the verification collateral (e.g., TCB Info structure and enclave identities) when a product has had one or more of its Intel SGX TCB or Intel TDX TCB component SVNs updated for a non-security purpose.

For example, Intel may identify a product line that has different values for a particular component SVN across different versions of the product. These could be different because the component SVN value was set when each product version was initially released at PV (Production Validated), but the component SVN value changed over time. In this case, enforcing the higher component SVN value across product versions as part of a TCB-Recovery (TCB-R)* can be of benefit for consistency purposes. If such an update does not reduce the security posture of the product versions, Intel may delay when the higher value enforcement happens to reduce unnecessary customer / ecosystem operational impact. When this enforcement does happen, Intel needs a way to indicate this type of non-security-impacting update has occurred (and does so via this Doc ID).

* For TCB-R lifecycle details, this technical paper is available as a reference.