Re: [tpm2] tpm support on Intel NUCs

[Duncan.Palmer at data61.csiro.au]

[-- Attachment #1: Type: text/plain, Size: 2949 bytes --]

Thanks Ian,


Sounds like we need to test some newer kernels..


Dunk


Duncan Palmer
Senior Software Engineer | Autonomous Systems
Data61 | CSIRO

E duncan.palmer(a)csiro.au

Queensland Centre for Advanced Technologies (QCAT),

1 Technology Court, Pullenvale QLD, 4069

www.data61.csiro.au<http://my.csiro.au/Business-Units/Operations/Communication/CSIRO-Branding/Data61-Branding/www.data61.csiro.au>


CSIRO's Digital Productivity business unit and NICTA have joined forces to create digital powerhouse Data61

________________________________
From: Ian Oliver <ian.justin.oliver(a)gmail.com>
Sent: 27 April 2018 14:59
To: Palmer, Duncan (Data61, Pullenvale)
Cc: tpm2(a)lists.01.org
Subject: Re: tpm support on Intel NUCs

Hello Duncan,

we've three NUC7i5DNKE<https://ark.intel.com/products/122486/Intel-NUC-Kit-NUC7i5DNKE> - two running Fedora (latest) and one with Ubuntu 17.04.  Worked for us out of the box: had to enable TXT in the BIOS but that set everything else necessary automatically.  SRTM measures work, DRTM with tboot does not - tboot just hangs - still debugging this one - the ACM module seems to be correct.

Fedora requires a kernel recompile to get SELinux and IMA/EMA running;  Ubuntu does not support IMA policies an AppArmor kernel panics.

tss/abrmd/tpm2-tools all compile with the latest releases, "master" does not without some hacking - old libraries etc (CentOS was nigh on impossible in this respect)

I'll check the kernel versions and tpm drivers when I get into the office, but 4.13 (at least) for the kernal has worked for us on more or less everything (NUC, Nokia AirFrame, Lenovo laptops).

t.

Ian

On 27 April 2018 at 01:20, <Duncan.Palmer(a)data61.csiro.au<mailto:Duncan.Palmer(a)data61.csiro.au>> wrote:

Apologies if this is slightly OT for this list...


We're running the tpm2 tools in Intel NUCs (a NUC5i7RYH to be exact), using Linux kernel 4.4.59 (shipped by Ubuntu as 4.4.0-77). The tpm drivers on this kernel don't work out of the box, and I had to put in a fairly nasty hack to make them work. The same driver now does not work on a newer NUC7i7 model. Are other people using NUCs, and if so, are you having similar issues?


Cheers,

Dunk


Duncan Palmer
Senior Software Engineer | Autonomous Systems
Data61 | CSIRO

E duncan.palmer(a)csiro.au

Queensland Centre for Advanced Technologies (QCAT),

1 Technology Court, Pullenvale QLD, 4069<https://maps.google.com/?q=1+Technology+Court,+Pullenvale+QLD,+4069&entry=gmail&source=g>

www.data61.csiro.au<http://my.csiro.au/Business-Units/Operations/Communication/CSIRO-Branding/Data61-Branding/www.data61.csiro.au>


CSIRO's Digital Productivity business unit and NICTA have joined forces to create digital powerhouse Data61



--
Dr. Ian Oliver
===============================
Privacy Engineering:  via Amazon<http://www.amazon.co.uk/dp/1497569710>
Twitter: @i_j_oliver

[-- Attachment #2: attachment.html --]
[-- Type: text/html, Size: 7123 bytes --]