Changes between Version 54 and Version 55 of malibu/gw3089gblade


Ignore:
Timestamp:
06/23/2023 09:50:11 PM (11 months ago)
Author:
Ryan Erbstoesser
Comment:

link to TPM

Legend:

Unmodified
Added
Removed
Modified
  • malibu/gw3089gblade

    v54 v55  
    254254
    255255
    256 ** TPM / Crypto
    257 
    258 The board contains an onboard Microchip ATTPM20P-H6MA1-10 TPM connected to the SPI1 bus.
    259 
    260 This is compliant to the Trusted Computing Group (TCG) Trusted Platform Module (TPM) Version 2.0,
    261 r116 Trusted Platform Module Library. See link here: [https://trustedcomputinggroup.org/ Link]
    262 
    263 Cryptographic Support for:
    264  - HMAC
    265  - AES-128
    266  - SHA-1
    267  - SHA-256
    268  - ECC BN_P256, ECCNIST_P256
    269  -RSA 1024-2048 bit keys
    270 
    271 It is controlled via generic TCG SPI Linux driver. TPM 2.0 provides direct access via /dev/tpm0 (with one client at a time), and can be accessed through the tpm2-abrmd resource manager daemon, or kernel-managed access via /dev/tpmrm0
    272 
    273 The TPM device is at /dev/tpm0
    274 
    275 The TPM tool set (over 100 different commands) can be installed with the following command:
    276 {{{
    277 apt install tpm2-tools tpm2-abrmd
    278 }}}
    279 
    280 Example tpm2-tools showing the properties:
    281 {{{
    282 root@jammy-malibu:~# tpm2_getcap properties-fixed
    283 TPM2_PT_FAMILY_INDICATOR:
    284   raw: 0x322E3000
    285   value: "2.0"
    286 TPM2_PT_LEVEL:
    287   raw: 0
    288 TPM2_PT_REVISION:
    289   raw: 0x77
    290   value: 1.19
    291 TPM2_PT_DAY_OF_YEAR:
    292   raw: 0x42
    293 TPM2_PT_YEAR:
    294   raw: 0x7DE
    295 TPM2_PT_MANUFACTURER:
    296   raw: 0x4D434850
    297   value: "MCHP"
    298 TPM2_PT_VENDOR_STRING_1:
    299   raw: 0x0
    300   value: ""
    301   etc.....
    302 
    303 }}}
    304 
    305 
    306 
    307 ** JTAG Programming & Firmware/OS Update
     256== TPM / Crypto
     257
     258See [wiki:tpm]
     259
     260
     261== JTAG Programming & Firmware/OS Update
    308262
    309263The GW3089 incorporates onboard a USB to JTAG FTDI chip to allow JTAG programming of the unit without the requirement for a separate JTAG dongle (GW16099) which is typically used on other Gateworks SBCs.