|
From: Seiji M. <sei...@gm...> - 2012-03-06 00:29:51
|
Hi On Sat, Feb 25, 2012 at 3:57 AM, William Rettig <wr...@tr...> wrote: > I’d to know that I can trust the integrity of the boot chain. It looks like > I will be fine with the 2.6.32 kernel. However, I’m not exactly sure what I > will have to do to GRUB. It looks to me like I need to build > TrustedGRUB1.1.5 and follow the guidance on its Wiki. What I don’t see > there is a solid test for the entire boot chain. My TPM 1.2 appears to be > working with 2.6.32 and tpm-tools fine. OpenPTS provide a validation of transitive trust chain. but it has limitation depend on BIOS and IPL. Supported configurations are; - Legacy BIOS + GRUB legacy with GRUB-IMA patch - Legacy BIOS + tboot (Intel TXT) - UEFI BIOS + tboot (Intel TXT) What hardware (vendor, machine type) are you using now? regards, -- Seiji |