Difference between revisions of "Intel GM45 TPM device iTPM INTC0102"
(â†Created page with 'INTC0102 Intel TPM device found in GM45 chipset is supposed to comply to TCG TPM 1.2 specifications, and thus be taken care of by '''tpm_tis''' kernel module. Unfortunatel...') |
m |
||
Line 1: | Line 1: | ||
− | INTC0102 Intel TPM device found in GM45 chipset is supposed to comply | + | INTC0102 Intel TPM device found in GM45 chipset is supposed to comply with TCG TPM 1.2 specifications, and thus be taken care of by '''tpm_tis''' kernel module. Unfortunately, it does not. After loading this module |
modprobe tpm_tis interrupts=0 force=1 | modprobe tpm_tis interrupts=0 force=1 | ||
Line 12: | Line 12: | ||
/sys/kernel/security/tpm0/binary_bios_measurements | /sys/kernel/security/tpm0/binary_bios_measurements | ||
− | but | + | but no further communication with the TPM device seems to be possible. |
In recent [http://sourceforge.net/mailarchive/forum.php?thread_name=200811280943427180885&forum_name=tpmdd-devel discussion] on tpmdd-devel mailing list Seiji Munetoh [http://sourceforge.net/mailarchive/message.php?msg_name=f02dbbe70812012308n32dc9fd6hd1f04d3ef6e002b7%40mail.gmail.com suggested] a quick fix, and Colin Didier [https://www.grounation.org/index.php?post/2008/07/04/8-how-to-use-a-tpm-with-linux made] a [http://cybione.org/~cdidier/log/data/200812020841/itpm.diff patch] out of it. | In recent [http://sourceforge.net/mailarchive/forum.php?thread_name=200811280943427180885&forum_name=tpmdd-devel discussion] on tpmdd-devel mailing list Seiji Munetoh [http://sourceforge.net/mailarchive/message.php?msg_name=f02dbbe70812012308n32dc9fd6hd1f04d3ef6e002b7%40mail.gmail.com suggested] a quick fix, and Colin Didier [https://www.grounation.org/index.php?post/2008/07/04/8-how-to-use-a-tpm-with-linux made] a [http://cybione.org/~cdidier/log/data/200812020841/itpm.diff patch] out of it. | ||
− | Now it is working, although I am still struggling to come up with | + | Now it is working, although I am still struggling to come up with a meaningful use for this TPM device :). Note, however, that '''tpm_tis''' has to be compiled as a module and unloaded before any suspend-to-ram or suspend-to-disk. Otherwise the machine would freeze. Also note that after waking up from suspend-to-ram and reloading tpm_tis, the [http://sourceforge.net/projects/trousers trousers] daemon refuses to restart. However it restarts with no problem after waking up from suspend-to-disk. |
==Models== | ==Models== | ||
*{{X200}} | *{{X200}} |
Revision as of 02:45, 4 April 2009
INTC0102 Intel TPM device found in GM45 chipset is supposed to comply with TCG TPM 1.2 specifications, and thus be taken care of by tpm_tis kernel module. Unfortunately, it does not. After loading this module
modprobe tpm_tis interrupts=0 force=1
and mounting securityfs
mount -t securityfs none /sys/kernel/security
it is possible to read the files
/sys/kernel/security/tpm0/ascii_bios_measurements /sys/kernel/security/tpm0/binary_bios_measurements
but no further communication with the TPM device seems to be possible.
In recent discussion on tpmdd-devel mailing list Seiji Munetoh suggested a quick fix, and Colin Didier made a patch out of it.
Now it is working, although I am still struggling to come up with a meaningful use for this TPM device :). Note, however, that tpm_tis has to be compiled as a module and unloaded before any suspend-to-ram or suspend-to-disk. Otherwise the machine would freeze. Also note that after waking up from suspend-to-ram and reloading tpm_tis, the trousers daemon refuses to restart. However it restarts with no problem after waking up from suspend-to-disk.