mirror of
https://github.com/jiazhang0/meta-secure-core.git
synced 2026-07-17 05:06:59 +00:00
Lans Zhang
22 lines
890 B
Markdown
22 lines
890 B
Markdown
### TPM 2.0
|
|
This feature enables Trusted Platform Module (TPM 2.0) support, including
|
|
kernel option changes to enable tpm drivers, and picking up TPM 2.0 packages.
|
|
|
|
Trusted Platform Module (TPM 2.0) is a microcontroller that stores keys,
|
|
passwords, and digital certificates. A TPM 2.0 offers the capabilities as
|
|
part of the overall platform security requirements.
|
|
|
|
### Clear TPM
|
|
For TPM 2.0, the following typical steps can be performed to get the TPM
|
|
ready for use:
|
|
|
|
- Clear and enable TPM from the BIOS or set the security jumper on the board.
|
|
- Take TPM ownership, setting Owner/Endorsement/Lockout passwords if
|
|
necessary. These passwords are used for the authorization to certain
|
|
TPM 2.0 commands.
|
|
```
|
|
# tpm2_takeownership -o <ownerPasswd> -e <endorsePasswd> -l <lockPasswd>
|
|
```
|
|
Then, you can use the TPM for a specific need, such as key generation,
|
|
sealing encrypted data, etc.
|