Various components of the SGX system (launch approval, remote attestation quote signing, etc) are implemented as Intel provided enclaves. AESM manages those enclaves and provides an untrusted API to communicate with them.