256 | | ** TPM / Crypto |
257 | | |
258 | | The board contains an onboard Microchip ATTPM20P-H6MA1-10 TPM connected to the SPI1 bus. |
259 | | |
260 | | This is compliant to the Trusted Computing Group (TCG) Trusted Platform Module (TPM) Version 2.0, |
261 | | r116 Trusted Platform Module Library. See link here: [https://trustedcomputinggroup.org/ Link] |
262 | | |
263 | | Cryptographic Support for: |
264 | | - HMAC |
265 | | - AES-128 |
266 | | - SHA-1 |
267 | | - SHA-256 |
268 | | - ECC BN_P256, ECCNIST_P256 |
269 | | -RSA 1024-2048 bit keys |
270 | | |
271 | | It is controlled via generic TCG SPI Linux driver. TPM 2.0 provides direct access via /dev/tpm0 (with one client at a time), and can be accessed through the tpm2-abrmd resource manager daemon, or kernel-managed access via /dev/tpmrm0 |
272 | | |
273 | | The TPM device is at /dev/tpm0 |
274 | | |
275 | | The TPM tool set (over 100 different commands) can be installed with the following command: |
276 | | {{{ |
277 | | apt install tpm2-tools tpm2-abrmd |
278 | | }}} |
279 | | |
280 | | Example tpm2-tools showing the properties: |
281 | | {{{ |
282 | | root@jammy-malibu:~# tpm2_getcap properties-fixed |
283 | | TPM2_PT_FAMILY_INDICATOR: |
284 | | raw: 0x322E3000 |
285 | | value: "2.0" |
286 | | TPM2_PT_LEVEL: |
287 | | raw: 0 |
288 | | TPM2_PT_REVISION: |
289 | | raw: 0x77 |
290 | | value: 1.19 |
291 | | TPM2_PT_DAY_OF_YEAR: |
292 | | raw: 0x42 |
293 | | TPM2_PT_YEAR: |
294 | | raw: 0x7DE |
295 | | TPM2_PT_MANUFACTURER: |
296 | | raw: 0x4D434850 |
297 | | value: "MCHP" |
298 | | TPM2_PT_VENDOR_STRING_1: |
299 | | raw: 0x0 |
300 | | value: "" |
301 | | etc..... |
302 | | |
303 | | }}} |
304 | | |
305 | | |
306 | | |
307 | | ** JTAG Programming & Firmware/OS Update |
| 256 | == TPM / Crypto |
| 257 | |
| 258 | See [wiki:tpm] |
| 259 | |
| 260 | |
| 261 | == JTAG Programming & Firmware/OS Update |