After BIOS update tp F.36 Rev.A I am getting this error AESMService: SGX is Disabled at AESM Service

[Rew452]

This morning I update my system BIOS from F.35 Rev A to F.36 Rev A and

am now getting I am getting this error "AESMService: SGX is Disabled at AESM Service".

I checked my bios setting it is set to Software which is what it should say as far as I remember.

What is wrong????

Event Viewer:

<Event 

- <System>

  <Provider Name="AESMService" Guid="{ce6e83d3-a7d9-4a91-96e0-e018ad574610}" />

  <EventID>108</EventID>

  <Version>0</Version>

  <Level>1</Level>

  <Task>0</Task>

  <Opcode>0</Opcode>

  <Keywords>0x8000000000000000</Keywords>

  <TimeCreated SystemTime="2021-01-27T18:36:17.9595940Z" />

  <EventRecordID>1872</EventRecordID>

  <Correlation />

  <Execution ProcessID="5184" ThreadID="16228" />

  <Channel>SGX/Admin</Channel>

  <Computer>DESKTOP-ODG5CFB</Computer>

  <Security UserID="S-1-5-18" />

  </System>

- <EventData>

  <Data Name="attrUnicodeString">SGX is Disabled at AESM Service startup</Data>

  </EventData>

An oddity I have noticed since posting is that it only occurs at Boot up or Restart.

Also PowerDVD which uses SGX for Bluray protected playback does not fault. Blurays and UHD's disc's play fine.

Prier Bios did not have ant issues with SGX.

I am on Windows Version 20H2 (OS build 19042.782) which is the latest as far as I know.

If there should be a software update to correct this it has not been released yet.

Intel Driver & Support Assistant reports all Intel software is up to date.

At this point it seems to be a BIOS error and needs to be fixed.

My PC is a  HP ENVY Curved All-in-One PC 34-b0xx

[Rew452]

Can I rollback to F.35 Rev a?

[Rew452 · Accepted solution]

OK, after several days of no response, I finally found my own answer to this issue.

After screening HP Driver downloads again for this PC I found this update which solves this issue.

Intel Platform ME Firmware Update

2020.2.1220 Rev.A 33.6 MB Jan 6, 2021

It is to bad that HP did not include this information with the BIOS update, since it is also required to complete the update! 

[Rew452]

Scratch that, it still ends up with same error AESMService: SGX is Disabled at AESM Service startup about 1-2 minutes latter after restart or boot up.

The ME update must be part of it but not all of it.

[Rew452]

After some time I really found the answer,

1. Enter BIOS setting and change from Software Controlled to Enable, Save 

2. Boot into windows

3 Reboot, Enter BIOS settings and change back to Software Controlled, Save,

4. Boot into windows - All Should be fine SGX services