Re: [tpmdd-devel] How to troubleshoot tpm_tis issues? ["tpm_transmit: tpm_recv: error -5", "tpm_transmit: tpm_send: error -5", "Operation Timed out", ...]

[Michael S. <mi...@go...>]

Hi Peter,

Thank you for the fast reply.

On Thu, Jan 16, 2014 at 1:28 AM, Peter Hüwe <Pet...@gm...> wrote:

>
> can you find out the manufacturer of the tpm? (e.g. tpm_version command)
> Also can you post the initial message of dmesg where the tpm is loaded?
> Maybe also a simple dmesg | grep -i tpm to filter out all messages.
>
> I'll ask two of the users who are affected if they want to participate in
this thread and then you would get the machine specific data directly from
them.


> Are you able to recompile a kernel and add some instrumentation in order to
> debug it further? (giving you the necessary instructions)
>
> I haven't played with patching the kernel in ages but it shouldn't be hard
to get started again... So consider it a non-issue. ;-)

>
> Is it only happening after suspend? (after a extended usage times).
>

This issue is really only happening after several suspends and extended
usage times. Quotes from affected users:
"I'd say I suspend my laptop 5-10 times on week days and see these issues
every few weeks"
"This has happened to me 4 or maybe 5 times in about 2 months"
In all cases a reboot fixes the issue till it happens again.


> Is the tpm actually used?
>

We use the TPM for several things:
* We use openCryptoki with the TPM as token store
* We store a machine specific cert to be able to identify/authenticate a
machine
* We use OpenVPN and it uses the machine specific cert via PKCS #11
* Some users experiment with WPA supplicant and PKCS #11 for 802.1x

Have you tried unloading & reloading the module?
>

Yes but it is hard to give definitive details. On some machines tcsd seems
to get in a weird state where stopping the service with init.d doesn't even
kill tcsd. In this state suspending definitely doesn't work anymore. Once
we forcefully kill tcsd the tpm_tis kernel module can be unloaded. It seems
that in all cases the tpm_tis module can be removed and reloaded if tcsd
isn't interfering.

The real issue at hand is though that tpm_tis doesn't work after a suspend
anymore:
$ lsmod | grep tpm
tpm_tis                18761  0

$ find /sys/class/misc | grep 'tpm' | xargs -I TPM -t cat
TPM/device/{active,enabled,owned}
<no output>

Are IRQs used? (maybe try without them interrupts=false as a module
> parameter)
>

I would leave that to my colleagues to test as I can't reproduce the issue
on my laptops.

>
> Thanks,
> Peter
>

Best,
Michael