This is documentation for the development version of the project, aka master branch. If you installed Gramine from packages, documentation for the stable version is available at

gramine-sgx-get-token – Gramine SGX token generator


gramine-sgx-get-token [OPTION]… –sig sigstruct_file –output token_file


gramine-sgx-get-token is used to generate the SGX token file for given SIGSTRUCT (“.sig” file).

Using this command is not necessary (it was previously), since the token is fetched automatically if needed during the first enclave start.

On upstream/DCAP driver this command does nothing and is deprecated. In the future, it will be removed altogether.

Command line arguments

--sig sigstruct_file, -s sigstruct_file

Path to the input file containing SIGSTRUCT.

--output token_file, -o token_file

Path to the output token file.

--verbose, -v

Print details to standard output. This is the default.

--quiet, -q

Don’t print details to standard output.