vTPM in dom0

vTPM in dom0

[Tom Buhl]

Hi,

yesterday I posted a question to the xen-users list concerning usage of the TPM in dom0.
This is the original message:
"I am using Xen 3.2.0 and want to use the TPM in dom0. I have activated vtpm and everything runs fine in my domUs.
The question is, how can I access the TPM in dom0? As far as I know vtpm_managerd exclusively locks /dev/tpm0. As soon as I start vtpm_managerd my own program cannot access the TPM anymore. Is there a vtpm instance for dom0 like the ones for the user domains?"

Anna Fischer replied with the suggestion to ask this list, if there has been any development recently in that direction. Is there a way to use the TPM in dom0?

Thanks in advance,

Tom
-- 
GMX startet ShortView.de. Hier findest Du Leute mit Deinen Interessen!
Jetzt dabei sein: http://www.shortview.de/?mc=sv_ext_mf@gmx

Re: vTPM in dom0

[tgh]

hi
I am interested in vtmp, and does xen3.1 support vtpm or not? i have got 
a hardware platform with tpm,i want to have a try with xen vtpm ,and i 
want to kown wether xen3.1 support vtpm or not ?
or how to use it in xen3.1 or xen3.2 ？

Thanks



Tom Buhl 写道:
> Hi,
>
> yesterday I posted a question to the xen-users list concerning usage of the TPM in dom0.
> This is the original message:
> "I am using Xen 3.2.0 and want to use the TPM in dom0. I have activated vtpm and everything runs fine in my domUs.
> The question is, how can I access the TPM in dom0? As far as I know vtpm_managerd exclusively locks /dev/tpm0. As soon as I start vtpm_managerd my own program cannot access the TPM anymore. Is there a vtpm instance for dom0 like the ones for the user domains?"
>
> Anna Fischer replied with the suggestion to ask this list, if there has been any development recently in that direction. Is there a way to use the TPM in dom0?
>
> Thanks in advance,
>
> Tom
>   

RE: vTPM in dom0

[Cihula, Joseph]

On Friday, March 14, 2008 5:52 AM, Tom Buhl wrote:
> Hi,
> 
> yesterday I posted a question to the xen-users list concerning usage
of the
> TPM in dom0. 
> This is the original message:
> "I am using Xen 3.2.0 and want to use the TPM in dom0. I have
activated vtpm
> and everything runs fine in my domUs. 
> The question is, how can I access the TPM in dom0? As far as I know
> vtpm_managerd exclusively locks /dev/tpm0. As soon as I start
vtpm_managerd
> my own program cannot access the TPM anymore. Is there a vtpm instance
for
> dom0 like the ones for the user domains?"   
> 
> Anna Fischer replied with the suggestion to ask this list, if there
has been
> any development recently in that direction. Is there a way to use the
TPM in
> dom0?  
> 
> Thanks in advance,
> 
> Tom

This was asked previously as part of a different thread
(http://lists.xensource.com/archives/html/xen-devel/2007-07/msg00812.htm
l), and the basic answer is that it was intended that only vTPM Manager
would have access to the physical TPM in dom0.  As such, it was written
with a stripped-down version of a TSS embedded withing itself, rather
than to use an external TSS (e.g. TrouSerS).

What is it that you would like to do with the physical TPM?

Joe

RE: vTPM in dom0

[Cihula, Joseph]

On Sunday, March 16, 2008 6:59 PM, tgh wrote:
> hi
> I am interested in vtmp, and does xen3.1 support vtpm or not? i have got
> a hardware platform with tpm,i want to have a try with xen vtpm ,and i
> want to kown wether xen3.1 support vtpm or not ?
> or how to use it in xen3.1 or xen3.2 ？
> 
> Thanks

Xen has support vTPM since long before 3.1, but it is optional and not built by default.  Instructions for enabling and using it are in docs/misc/vtpm.txt and tools/vtpm_manager/README.

Joe

> 
> 
> 
> Tom Buhl 写道:
>> Hi,
>> 
>> yesterday I posted a question to the xen-users list concerning usage of the
>> TPM in dom0. 
>> This is the original message:
>> "I am using Xen 3.2.0 and want to use the TPM in dom0. I have activated vtpm
>> and everything runs fine in my domUs. 
>> The question is, how can I access the TPM in dom0? As far as I know
>> vtpm_managerd exclusively locks /dev/tpm0. As soon as I start vtpm_managerd
>> my own program cannot access the TPM anymore. Is there a vtpm instance for
>> dom0 like the ones for the user domains?"   
>> 
>> Anna Fischer replied with the suggestion to ask this list, if there has been
>> any development recently in that direction. Is there a way to use the TPM in
>> dom0?  
>> 
>> Thanks in advance,
>> 
>> Tom
>> 
> 
> 
> _______________________________________________
> Xen-devel mailing list
> Xen-devel@lists.xensource.com
> http://lists.xensource.com/xen-devel