Intel GM45 TPM device iTPM INTC0102 - Revision history

Newhren at 20:26, 23 March 2010

2010-03-23T20:26:32Z

Newhren at 03:34, 23 March 2010

2010-03-23T03:34:23Z

Cmsj at 08:49, 9 February 2010

2010-02-09T08:49:28Z

Newhren at 04:41, 1 May 2009

2009-05-01T04:41:50Z

Newhren at 06:20, 24 April 2009

2009-04-24T06:20:54Z

Newhren at 01:45, 4 April 2009

2009-04-04T01:45:14Z

Newhren: â†Created page with 'INTC0102 Intel TPM device found in GM45 chipset is supposed to comply to TCG TPM 1.2 specifications, and thus be taken care of by '''tpm_tis''' kernel module. Unfortunatel...'

2009-04-03T23:40:52Z

â†Created page with 'INTC0102 Intel TPM device found in GM45 chipset is supposed to comply to TCG TPM 1.2 specifications, and thus be taken care of by '''tpm_tis''' kernel module. Unfortunatel...'

New page

INTC0102 Intel TPM device found in GM45 chipset is supposed to comply to TCG TPM 1.2 specifications, and thus be taken care of by '''tpm_tis''' kernel module. Unfortunately, it is not. After loading this module

modprobe tpm_tis interrupts=0 force=1

and mounting securityfs

mount -t securityfs none /sys/kernel/security

it is possible to read the files

/sys/kernel/security/tpm0/ascii_bios_measurements
/sys/kernel/security/tpm0/binary_bios_measurements

but nothing else seems to be possible.

In recent [http://sourceforge.net/mailarchive/forum.php?thread_name=200811280943427180885&forum_name=tpmdd-devel discussion] on tpmdd-devel mailing list Seiji Munetoh [http://sourceforge.net/mailarchive/message.php?msg_name=f02dbbe70812012308n32dc9fd6hd1f04d3ef6e002b7%40mail.gmail.com suggested] a quick fix, and Colin Didier [https://www.grounation.org/index.php?post/2008/07/04/8-how-to-use-a-tpm-with-linux made] a [http://cybione.org/~cdidier/log/data/200812020841/itpm.diff patch] out of it.

Now it is working, although I am still struggling to come up with an idea how would I use this TPM device :). Note, however, that '''tpm_tis''' has to be compiled as a module and unloaded before any suspend-to-ram or suspend-to-disk. Otherwise the machine would freeze. Also note that after waking up from suspend-to-ram and reloading tpm_tis, the [http://sourceforge.net/projects/trousers trousers] daemon refuses to restart. However it restarts with no problem after waking up from suspend-to-disk.

==Models==
*{{X200}}

@@ Line 19: / Line 19: @@
 ==Notes==
-As of kernel 2.6.33.1, INTC0102 Intel TPM device is supported by the vanilla kernel. The only caveat is that the module '''tpm_tis''' has to be loaded with options
+The above-mentioned patch was merged into the kernel 2.6.33, and INTC0102 Intel TPM device works out of the box with the vanilla kernel. The only caveat is that the module '''tpm_tis''' has to be loaded with options
   modprobe tpm_tis interrupts=0 force=1 itpm=1

@@ Line 17: / Line 17: @@
 Note, however, that '''tpm_tis''' has to be compiled as a module and unloaded before suspend-to-disk, or it would freeze on wake-up. Suspend-to-ram seems to be OK, moreover if you unload '''tpm_tis''' before suspend-to-ram and modprobe in after resume -- then [http://sourceforge.net/projects/trousers trousers] daemon will refuse to restart. To get trousers run again, you have to either reboot or suspend-to-disk/wake-up.
 ==Models==
 *{{X200}}
 *{{X301}}

← Older revision		Revision as of 08:49, 9 February 2010
Line 20:		Line 20:
	==Models==		==Models==
	*{{X200}}		*{{X200}}
		+	*{{X301}}

@@ Line 1: / Line 1: @@
-INTC0102 Intel TPM device found in GM45 chipset is supposed to comply to TCG TPM 1.2 specifications, and thus be taken care of by '''tpm_tis''' kernel module. Unfortunately, it is not. After loading this module
+INTC0102 Intel TPM device found in GM45 chipset is supposed to comply with TCG TPM 1.2 specifications, and thus be taken care of by '''tpm_tis''' kernel module. Unfortunately, it does not. After loading this module
   modprobe tpm_tis interrupts=0 force=1
@@ Line 12: / Line 12: @@
   /sys/kernel/security/tpm0/binary_bios_measurements
-but nothing else seems to be possible.
+but no further communication with the TPM device seems to be possible.
 In recent [http://sourceforge.net/mailarchive/forum.php?thread_name=200811280943427180885&forum_name=tpmdd-devel discussion] on tpmdd-devel mailing list Seiji Munetoh [http://sourceforge.net/mailarchive/message.php?msg_name=f02dbbe70812012308n32dc9fd6hd1f04d3ef6e002b7%40mail.gmail.com suggested] a quick fix, and Colin Didier [https://www.grounation.org/index.php?post/2008/07/04/8-how-to-use-a-tpm-with-linux made] a [http://cybione.org/~cdidier/log/data/200812020841/itpm.diff patch] out of it.
-Now it is working, although I am still struggling to come up with an idea how would I use this TPM device :). Note, however, that '''tpm_tis''' has to be compiled as a module and unloaded before any suspend-to-ram or suspend-to-disk. Otherwise the machine would freeze. Also note that after waking up from suspend-to-ram and reloading tpm_tis, the [http://sourceforge.net/projects/trousers trousers] daemon refuses to restart. However it restarts with no problem after waking up from suspend-to-disk.
+Now it is working, although I am still struggling to come up with a meaningful use for this TPM device :). Note, however, that '''tpm_tis''' has to be compiled as a module and unloaded before any suspend-to-ram or suspend-to-disk. Otherwise the machine would freeze. Also note that after waking up from suspend-to-ram and reloading tpm_tis, the [http://sourceforge.net/projects/trousers trousers] daemon refuses to restart. However it restarts with no problem after waking up from suspend-to-disk.
 ==Models==
 *{{X200}}