Changes between Version 7 and Version 8 of tpm
- Timestamp:
- 03/19/2024 03:24:26 PM (8 weeks ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
tpm
v7 v8 134 134 Usage Example: 135 135 {{{#!bash 136 u-boot=> tpm 2device136 u-boot=> tpm device 137 137 device 0: tpm@0 v2.0: VendorID 0x1114, DeviceID 0x3205, RevisionID 0x01 [open] 138 u-boot=> tpm 2info139 tpm@0 v2.0: VendorID 0x1114, DeviceID 0x3205, RevisionID 0x01 [open] u-boot=> tpm2 init140 u-boot=> tpm 2init141 u-boot=> tpm 2startup TPM2_SU_CLEAR142 u-boot=> tpm 2self_test full143 u-boot=> tpm 2self_test continue138 u-boot=> tpm info 139 tpm@0 v2.0: VendorID 0x1114, DeviceID 0x3205, RevisionID 0x01 [open] 140 u-boot=> tpm init 141 u-boot=> tpm startup TPM2_SU_CLEAR 142 u-boot=> tpm self_test full 143 u-boot=> tpm self_test continue 144 144 }}} 145 145 146 # now we can pursue measured boot (see https://bootlin.com/blog/measured-boot-with-a-tpm-2-0-in-u-boot/) 147 # extend the PCR as needed giving the PCR number and the address where the digtest is stored 148 u-boot=> tpm 2extend 0 $loadaddr # extend PCR 0 using digest loaded to $loadaddr149 ^^^ what's the digest? I think this refers to whatever you are using for key/auth the next phase 146 At this point you can pursue [https://bootlin.com/blog/measured-boot-with-a-tpm-2-0-in-u-boot/ measured boot] byt extending the PCR as needed: 147 {{{#!bash 148 u-boot=> tpm extend 0 $loadaddr # extend PCR 0 using digest loaded to $loadaddr 149 }}} 150 150 151 151 see also:
