Re: [TrouSerS-users] kernel measured - pcrs still zero? (newmachine)

[Seiji M. <sei...@gm...>]

Hi Justin

2006/9/8, Osborn, Justin D. <Jus...@jh...>:
> > > However, once booted, cat /sys/class/misc/tpm0/device/pcrs shows
> PCRs
> > > 8 and after cleared.  Mounting /sys/kernel/security and catting the
> > > bios measurements shows logs of it trying to extend PCR 8 and 9 (I
> > > have grub.conf set to measure the kernel in 8 and the initrd in 9).
> > > But PCR 8 and 9 are still cleared...what's up with that?
> > >
> > Justin- Can you provide the relevant lines from your grub.conf?
>
> Grub.conf looks like:
> title Fedora Core (2.6.17-1.2174_FC5smp)
>         root (hd0,0)
>         kernel --pcr=8 /vmlinuz-2.6.17-1.2174_FC5smp ro
> root=/dev/VolGroup00/LogVol00 rhgb quiet
>         initrd --pcr=9 /initrd-2.6.17-1.2174_FC5smp.img

E.g.
Please try to use PCR[7] instead of PCR[8].
Some bios does not allow to use PCR[8-15/23]  from BIOS Int 1Ah call.
This is a bios bug. Let me know your BIOS version.

Regards,
--
Seiji