Files
meta-secure-core/meta-tpm2
Jia Zhang ba72aa48fb Maintain the stable branch sumo
The following commits are reverted by the way:

- meta-integrity: rpm: Add back in required patches for rocko (5fa9c85)
- meta-intel-sgx: Initial support of linux-sgx-driver (7d4f711)

The former is applicable to rocko only, and the latter is still experimental.

Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
2018-09-21 02:26:49 -04:00
..
2018-09-21 02:26:49 -04:00
2018-08-03 10:49:00 +08:00
2017-07-13 15:31:14 +08:00
2017-06-22 15:24:04 +08:00

TPM 2.0

This feature enables Trusted Platform Module (TPM 2.0) support, including kernel option changes to enable tpm drivers, and picking up TPM 2.0 packages.

Trusted Platform Module (TPM 2.0) is a microcontroller that stores keys, passwords, and digital certificates. A TPM 2.0 offers the capabilities as part of the overall platform security requirements.

Clear TPM

For TPM 2.0, the following typical steps can be performed to get the TPM ready for use:

  • Clear and enable TPM from the BIOS or set the security jumper on the board.
  • Take TPM ownership, setting Owner/Endorsement/Lockout passwords if necessary. These passwords are used for the authorization to certain TPM 2.0 commands.
  # tpm2_takeownership -o <ownerPasswd> -e <endorsePasswd> -l <lockPasswd>

Then, you can use the TPM for a specific need, such as key generation, sealing encrypted data, etc.