blob: a33bc6b21579737cbc023fdb2f17b84b86e5c95d (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
|
1. Download TPM emulator - ibmtpm974.tar.gz
a. cd src/
b. make
c. Run tpm_server binary - ./tpm_server –rm
2. Download TSS version 1.2.0
a. Run following commands
i. ./bootstrap
ii. ./configure
iii. If you face any error for pkg-config,
1. export PKG_CONFIG_PATH=/usr/local/lib/pkgconfig
iv. make && make install
3. Download tpm2-abrmd version 1.1.1
a. Run following commands
i. sudo useradd --system --user-group tss
ii. cd tpm2-abrmd
iii. ./bootstrap
iv. ./configure
v. If you face any error for pkg-config,
1. export PKG_CONFIG_PATH=/usr/local/lib/pkgconfig
vi. make && make install
vii. sudo udevadm control --reload-rules && sudo udevadm trigger
viii. sudo pkill -HUP dbus-daemon
ix. systemctl daemon-reload
b. Run tpm2-abrmd as follows - ./tpm2-abrmd -t socket
c. Check in tpm_server whether following debug prints are resulted in console, after resource manager startup
Client accepted
Client accepted
4. Download tpm2-tools version 2.1.0
a. Run the following commands
i. ./bootstrap
ii. ./configure
iii. make && make install
5. Now configure Initialize TPM, configure with Primary key and then save it in TPM’s NV ram
a. Initialize TPM
i. tpm2_startup -clear -T tabrmd –V
b. Take ownership
i. tpm2_takeownership -o new -e new -l new -T tabrmd –V
c. Create Primary Key
i. tpm2_createprimary -P new -A o -g 0x000B -G 0x0001 -T tabrmd -V -C PrimaryKeyBlob
d. Save primary Key in NV ram
i. tpm2_evictcontrol -A o -c ./PrimaryKeyBlob -S 0x81000011 -T tabrmd -V -P new
e. Check Primary Keys public portion
i. tpm2_readpublic -H 0x81000011 --opu out_primary_public -T tabrmd –V
f. If all the above commands are successful then TPM emulator, TPM resource manager and TPM tools are working fine
6. Now compile the TPM duplication tool with "make" command and run it as per instructions. use "./ossl_tpm_util --help" for usage.
7. Note: If you restart tpm_server, then you have to restart TPM resource manager too. And the repeat from step 5.
|
