Files
meta-secure-core/meta-tpm2
Jia Zhang 0bb383b60a tpm2-abrmd: move tpm2-abrmd.default to tpm2-abrmd.inc
Use separate directories to store tpm2-abrmd.default for stable
and git version.

Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
2018-06-16 05:12:46 -04:00
..
2018-05-26 08:08:58 +08:00
2017-07-13 15:31:14 +08:00
2017-06-22 15:24:04 +08:00

TPM 2.0

This feature enables Trusted Platform Module (TPM 2.0) support, including kernel option changes to enable tpm drivers, and picking up TPM 2.0 packages.

Trusted Platform Module (TPM 2.0) is a microcontroller that stores keys, passwords, and digital certificates. A TPM 2.0 offers the capabilities as part of the overall platform security requirements.

Clear TPM

For TPM 2.0, the following typical steps can be performed to get the TPM ready for use:

  • Clear and enable TPM from the BIOS or set the security jumper on the board.
  • Take TPM ownership, setting Owner/Endorsement/Lockout passwords if necessary. These passwords are used for the authorization to certain TPM 2.0 commands.
  # tpm2_takeownership -o <ownerPasswd> -e <endorsePasswd> -l <lockPasswd>

Then, you can use the TPM for a specific need, such as key generation, sealing encrypted data, etc.