Hi Jimmy,

Thanks for you help.

Now I can almost successfully run tboot on X220 tablet. The only problem is the verification of module 0 (linux kernel in my case) which is extended to PCR-18 failed.

I followed instructions in docs/policy_v2.txt and lcptools/lcptools2.txt to create the LCP and VLP. The only difference is the second step in creating VLP:

The original version: 

2.  tb_polgen/tb_polgen --add --num 0 --pcr none --hash image --cmdline "the command line for xen from grub.conf" --image /boot/xen.gz vl.pol

and I changed it to :

2.   tb_polgen/tb_polgen --add --num 0 --pcr none --hash image --cmdline "intel_iommu=on root=UUID=XX(my uuid)XXX ro quiet splash vt.handoff=7" --image /boot/vmlinuz-3.5.0.-31=generic vl.pol

since there is no xen in my case.

The result of module verification is that the verification for PCR 18 failed while the verification for PCR 19 (initrd.img) successed.

Is there any specific command to hash linux kernel other than xen? Any help will be much  appreciated. 

Thanks,
Hu Hong


On Thu, May 30, 2013 at 10:21 PM, Wei, Gang <gang.wei@intel.com> wrote:
Please have a try with 3nd_gen_i5_i7_SINIT_51.BIN

Jimmy

-----Original Message-----
From: Hong Hu [mailto:huhongtpm@gmail.com]
Sent: Thursday, May 30, 2013 3:38 PM
To: Wei, Gang
Cc: tboot-devel@lists.sourceforge.net
Subject: Re: [tboot-devel] TBOOT ERRORCODE: 0xc00020a1

Hi Jimmy,

By setting the vga_delay to a large number, I can watch the log when the
system is booting. The result log shows the system can run until executing
GETSEC[SENTER], then it crashes. Does it mean that the ACM is not suitable
for X220 tablet?


Thanks,
Hu Hong