Re: [tboot-devel] Infineon TPM problems and fixes

[Hal F. <hal...@gm...>]

On Jan 16, 2008 5:49 AM, David Dorsey <tro...@gm...> wrote:
> That's weird.  When I try to enable OS management of Embedded Security
> Device I get "This feature cannot be changed while "Trusted Execution
> Technology" feature is enabled.  So I tried turning off TXT, enabling OS
> management, and then turning TXT on again... This BIOS then disabled that
> feature.

Hmmm, I recall experiencing something similar when I was trying to
initially enable the various options. I'm not sure how I got it turned
on now. Anyway, I don't think it is important. I disabled it and tboot
still launches just fine.

> What version of the BIOS do you have?

>From the System Information screen in BIOS, it is "786F1 v01.04".

I also ran tpm_version from the CVS tpm-tools and it had the same
output you reported.

Did you patch tboot/common/tpm.c in order to get past the timeout
problems I reported? Did you perhaps make any other patches to tboot?

One other change I made, probably not important, is that I disabled
the "trousers" target in the main tboot Makefile. I already have
Trousers from trousers.sf.net CVS head installed and running, and it
has the NV support needed by tboot.

Hal