11466 2017-05-05 07:06:25 +0000 TPM 2.0 support (under qemu) 2025-02-14 16:48:27 +0000 1 1 6 Yocto Project Subprojects IoT Reference OS Kit intel-iot-refkit-security 2.4 x86 Multiple IN PROGRESS IMPLEMENTATION Medium enhancement Future 1 patrick.ohly unassigned liezhi.yang matti-pekka.sivosuo mikko.ylinen randy.macleod sgw tim.orling --- --- No (bug/feature does not impact docs) oldest_to_newest 73070 0 patrick.ohly 2017-05-05 07:06:25 +0000 Currently, whole-disk encryption only works with TPM v1.2. TPM in firmware (aka fTPM) is based on TPM v2.0. This issue here covers: - enabling the TPM 2.0 userspace = https://github.com/01org/tpm2.0-tools - adding the necessary kernel configuration (if needed) - adding a "tpm2.0" image and distro feature, with the corresponding changes to the code which currently only supports tpm1.2 (initramfs, installer): as for 1.2, usage of 2.0 is meant to be optional with parameters to make it mandatory - testing under qemu, using the experimental https://github.com/stefanberger/swtpm/tree/tpm2-preview *Not* covered is testing on real hardware. Joule might work, but testing and automating that is something that needs to be done by QA. 75556 1 patrick.ohly 2017-08-01 11:26:03 +0000 https://github.com/pohly/intel-iot-refkit/commits/tpm2 contains my work-in-progress changes. Currently it only allows building tpm2.0-tools from meta-measured. Clearly I am not going to finish this for M2, so I propose moving it to M3. 87595 2 tim.orling 2020-06-25 08:20:13 +0000 Still valid and should be possible to refactor refkit implementation. 99148 3 tim.orling 2024-06-06 15:20:20 +0000 Unfortunately, meta-measured (https://github.com/flihp/meta-measured) is now marked as archived. The most current tpm support is in meta-tpm (https://git.yoctoproject.org/meta-security/tree/meta-tpm) The number of recipes there is probably too much to move into oe-core, so we might want to create a reference implementation in meta-security. Hopefully one that could be tested on the AutoBuilder. 100993 4 randy.macleod 2025-02-14 16:46:29 +0000 bulk change to add Saul's non-WR address. 101080 5 randy.macleod 2025-02-14 16:48:27 +0000 Bulk change: Remove Saul's old WR address.