The TPM merely tells you if your firmware or boot process has changed, and nothing more, whereas SGX is instead used to protect sensitive or confidential processes from the host. One similarity TPM and SGX have is that they both cannot be spoofed, allowing a system to know that it is talking to the real deal.

Generally, you shouldn't disable Intel SGX under any circumstances. If you plan to use Intel SGX to help secure your applications and sensitive data, disablement should be completely avoided, as disablement offers no application or data protection whatsoever.

Find out if a specific processor supports Intel® SGX: Go to product specifications (ARK). Enter the processor number in the Search Intel.com box in the top-right corner. On the product specification page of the processor, click Security & Reliability and look for Intel® Software Guard Extensions (Intel® SGX).

Highly utilized: SGX statically partitions the physical memory into two halves; secure memory (i.e., enclave page cache or EPC) cannot be shared with the OS, whereas TD (namely, encrypted VM) pages can be flexibly configured to be private, shared or public (unencrypted).