oasisprotocol · Feb 6, 2024 · Feb 6, 2024 · Feb 7, 2024 · Feb 19, 2024
Showing with 37 additions and 1 deletion.

+26 −0 docs/node/run-your-node/paratime-client-node.mdx

+11 −1 docs/node/run-your-node/prerequisites/system-configuration.mdx
diff --git a/docs/node/run-your-node/paratime-client-node.mdx b/docs/node/run-your-node/paratime-client-node.mdx
@@ -208,6 +208,32 @@ Before using this configuration you should collect the following information to
   * You can find the current Oasis Seed Node address in the Network Parameters page ([Mainnet], [Testnet]).
 * `{{ runtime_orc_path }}`: Path to the [ParaTime bundle](paratime-client-node.mdx#the-paratime-bundle) of the form `/node/runtimes/foo-paratime.orc`.
   * You can find the current Oasis-supported ParaTimes in the Network Parameters page ([Mainnet], [Testnet]).
+## Configuring for Confidential States
+
+To enable access to confidential states on your ParaTime Client Node using SGX, follow these steps:
+
+1. **Update Runtime Configuration:**
+   Add the following configuration to your `/node/etc/config.yml` file:
+
+   ```yaml
+   runtime:
+       # Paths to ParaTime bundles for all of the supported ParaTimes.
+       paths:
+           - {{ runtime_orc_path }}
+       environment: sgx
+       config:
+         {{ paratime_id }}:
+             estimate_gas_by_simulating_contracts: true
+             allowed_queries:
+                 - all_expensive: true 
+       sgx_loader: /node/bin/oasis-core-runtime-loader
+
+Before using this configuration you should collect the following information to replace  the  variables present in the configuration file:.
+
+* `{{ paratime_id}}`: RUNTIME_ID - See runtime identifiers on how to choose a runtime identifier.
+* `{{ runtime_orc_path }}`: Path to the [ParaTime bundle](paratime-client-node.mdx#the-paratime-bundle) of the form `/node/runtimes/foo-paratime.orc`.
+  * You can find the current Oasis-supported ParaTimes in the Network Parameters page ([Mainnet], [Testnet]).
+
 
 ## Starting the Oasis Node
 

diff --git a/docs/node/run-your-node/prerequisites/system-configuration.mdx b/docs/node/run-your-node/prerequisites/system-configuration.mdx
@@ -198,7 +198,17 @@ chpst -u oasis oasis-node ...
 </TabItem>
 </Tabs>
 
-5. Start your Oasis Node.
+5. Adding SGX Permissions for ParaTime Node/Client
+
+If you intend to run a ParaTime Node or a ParaTime Client Node and want to enable SGX support, you'll need to ensure that the `oasis` user has the necessary permissions to access SGX resources.
+
+1. **Add `oasis` User to `sgx` Group:**
+   Ensure that the `oasis` user is added to the `sgx` group to grant it access to SGX resources. You can do this by running:
+
+   ```bash
+   sudo usermod -aG sgx oasis
+
+6. Start your Oasis Node.
 
 [`User` directive]:
   https://www.freedesktop.org/software/systemd/man/systemd.exec.html#User=