Difference between revisions of "Intel GM45 TPM device iTPM INTC0102"

From ThinkWiki
Jump to: navigation, search
(←Created page with 'INTC0102 Intel TPM device found in GM45 chipset is supposed to comply to TCG TPM 1.2 specifications, and thus be taken care of by '''tpm_tis''' kernel module. Unfortunatel...')
 
m
Line 1: Line 1:
INTC0102 Intel TPM device found in GM45 chipset is supposed to comply to TCG TPM 1.2 specifications, and thus be taken care of by '''tpm_tis''' kernel module. Unfortunately, it is not. After loading this module
+
INTC0102 Intel TPM device found in GM45 chipset is supposed to comply with TCG TPM 1.2 specifications, and thus be taken care of by '''tpm_tis''' kernel module. Unfortunately, it does not. After loading this module
  
 
  modprobe tpm_tis interrupts=0 force=1
 
  modprobe tpm_tis interrupts=0 force=1
Line 12: Line 12:
 
  /sys/kernel/security/tpm0/binary_bios_measurements
 
  /sys/kernel/security/tpm0/binary_bios_measurements
  
but nothing else seems to be possible.
+
but no further communication with the TPM device seems to be possible.
  
 
In recent [http://sourceforge.net/mailarchive/forum.php?thread_name=200811280943427180885&forum_name=tpmdd-devel discussion] on tpmdd-devel mailing list Seiji Munetoh [http://sourceforge.net/mailarchive/message.php?msg_name=f02dbbe70812012308n32dc9fd6hd1f04d3ef6e002b7%40mail.gmail.com suggested] a quick fix, and Colin Didier [https://www.grounation.org/index.php?post/2008/07/04/8-how-to-use-a-tpm-with-linux made] a [http://cybione.org/~cdidier/log/data/200812020841/itpm.diff patch] out of it.
 
In recent [http://sourceforge.net/mailarchive/forum.php?thread_name=200811280943427180885&forum_name=tpmdd-devel discussion] on tpmdd-devel mailing list Seiji Munetoh [http://sourceforge.net/mailarchive/message.php?msg_name=f02dbbe70812012308n32dc9fd6hd1f04d3ef6e002b7%40mail.gmail.com suggested] a quick fix, and Colin Didier [https://www.grounation.org/index.php?post/2008/07/04/8-how-to-use-a-tpm-with-linux made] a [http://cybione.org/~cdidier/log/data/200812020841/itpm.diff patch] out of it.
  
Now it is working, although I am still struggling to come up with an idea how would I use this TPM device :). Note, however, that '''tpm_tis''' has to be compiled as a module and unloaded before any suspend-to-ram or suspend-to-disk. Otherwise the machine would freeze. Also note that after waking up from suspend-to-ram and reloading tpm_tis, the [http://sourceforge.net/projects/trousers trousers] daemon refuses to restart. However it restarts with no problem after waking up from suspend-to-disk.
+
Now it is working, although I am still struggling to come up with a meaningful use for this TPM device :). Note, however, that '''tpm_tis''' has to be compiled as a module and unloaded before any suspend-to-ram or suspend-to-disk. Otherwise the machine would freeze. Also note that after waking up from suspend-to-ram and reloading tpm_tis, the [http://sourceforge.net/projects/trousers trousers] daemon refuses to restart. However it restarts with no problem after waking up from suspend-to-disk.
  
 
==Models==
 
==Models==
 
*{{X200}}
 
*{{X200}}

Revision as of 03:45, 4 April 2009

INTC0102 Intel TPM device found in GM45 chipset is supposed to comply with TCG TPM 1.2 specifications, and thus be taken care of by tpm_tis kernel module. Unfortunately, it does not. After loading this module

modprobe tpm_tis interrupts=0 force=1

and mounting securityfs

mount -t securityfs none /sys/kernel/security

it is possible to read the files

/sys/kernel/security/tpm0/ascii_bios_measurements
/sys/kernel/security/tpm0/binary_bios_measurements

but no further communication with the TPM device seems to be possible.

In recent discussion on tpmdd-devel mailing list Seiji Munetoh suggested a quick fix, and Colin Didier made a patch out of it.

Now it is working, although I am still struggling to come up with a meaningful use for this TPM device :). Note, however, that tpm_tis has to be compiled as a module and unloaded before any suspend-to-ram or suspend-to-disk. Otherwise the machine would freeze. Also note that after waking up from suspend-to-ram and reloading tpm_tis, the trousers daemon refuses to restart. However it restarts with no problem after waking up from suspend-to-disk.

Models