| 1 | = Trusted Protection Module |
| 2 | |
| 3 | Gateworks has an optional TPM on some SBCs. |
| 4 | |
| 5 | The below models can optionally have it loaded: |
| 6 | * Malibu GW8901 |
| 7 | * Venice GW74xx, GW73xx, GW72xx |
| 8 | |
| 9 | The boards can contain an onboard Microchip ATTPM20P-H6MA1-10 TPM connected to the SPI bus. |
| 10 | |
| 11 | This is compliant to the Trusted Computing Group (TCG) Trusted Platform Module (TPM) Version 2.0, |
| 12 | r116 Trusted Platform Module Library. See link here: [https://trustedcomputinggroup.org/ Link] |
| 13 | |
| 14 | Cryptographic Support for: |
| 15 | - HMAC |
| 16 | - AES-128 |
| 17 | - SHA-1 |
| 18 | - SHA-256 |
| 19 | - ECC BN_P256, ECCNIST_P256 |
| 20 | -RSA 1024-2048 bit keys |
| 21 | |
| 22 | It is controlled via generic TCG SPI Linux driver. TPM 2.0 provides direct access via /dev/tpm0 (with one client at a time), and can be accessed through the tpm2-abrmd resource manager daemon, or kernel-managed access via /dev/tpmrm0 |
| 23 | |
| 24 | The TPM device is at /dev/tpm0 |
| 25 | |
| 26 | The TPM tool set (over 100 different commands) can be installed with the following command: |
| 27 | {{{ |
| 28 | apt install tpm2-tools tpm2-abrmd |
| 29 | }}} |
| 30 | |
| 31 | Example tpm2-tools showing the properties: |
| 32 | {{{ |
| 33 | root@jammy-malibu:~# tpm2_getcap properties-fixed |
| 34 | TPM2_PT_FAMILY_INDICATOR: |
| 35 | raw: 0x322E3000 |
| 36 | value: "2.0" |
| 37 | TPM2_PT_LEVEL: |
| 38 | raw: 0 |
| 39 | TPM2_PT_REVISION: |
| 40 | raw: 0x77 |
| 41 | value: 1.19 |
| 42 | TPM2_PT_DAY_OF_YEAR: |
| 43 | raw: 0x42 |
| 44 | TPM2_PT_YEAR: |
| 45 | raw: 0x7DE |
| 46 | TPM2_PT_MANUFACTURER: |
| 47 | raw: 0x4D434850 |
| 48 | value: "MCHP" |
| 49 | TPM2_PT_VENDOR_STRING_1: |
| 50 | raw: 0x0 |
| 51 | value: "" |
| 52 | etc..... |
| 53 | |
| 54 | }}} |
| 55 | |