Re: [TrouSerS-tech] Can not enable the TPM after clearing it.

[Tom L. <to...@us...>]

> Hi,all!
>
> I cannot enable the TPM after clearing it. Below is the detail
description:
> After setting up the environment(kernel 2.6.12, trousers-0.1.11,
> tpm-tools-1.0.0) .IBM T42), I executed the following commands:
> 1. tpm_takeownership
> 2. tpm_clear
>     It told me: "TPM Successfuly Cleared.  You need to reboot to
> complete this operation.  After reboot the TPM will be in the
> default state: unowned, disabled and inactive."
>
>     After I rebooted the system, I found I could not enable the TPM:
> 1.
> [root@Eddie include]# tpm_setenable -e
> Enter owner password:
> Tspi_TPM_SetStatus failed: 0x00000012 - layer=tpm, code=0012 (18), No SRK
> 2.
> [root@Eddie include]# tpm_setenable -e -f
> Tspi_TPM_SetStatus failed: 0x0000002d - layer=tpm, code=002d (45),
> Bad physical presence value
>
>     Has anybody encountered this problem? How could I solve it?
>

Some of the commands that the tpm-tools package provides are intended
for systems that may not have full BIOS support for a TPM.  The T42
has full BIOS support for the TPM.  This means that you will need to
enter your BIOS setup in physical presence mode (for a ThinkPad this
means holding down the "Fn" key while powering on then releasing the
"Fn" key to then press the key to enter the BIOS setup).  Once
in the BIOS setup there should be an entry that allows you to enable
and clear the TPM.  This will put the TPM in the proper state to allow
you to take ownership via the tpm_takeownership command after you boot
your system.

Tom