Re: [Trustedgrub-users] Unable to build trusted-grub

[Marcel S. <tg...@se...>]

Hi,

> My TPM is active, and uses the tpm_tis driver (with the force=1 option
> for ACPI) included in the linux 2.6.19 kernel.  It's a Dell 380.

Good to see, that your TPM is working under Linux. But as you can see, Dell didn't
add the TPM into their ACPI-table, which is why you have to use the force=1 option.

Additionally, Dell does not provide the necessary CRTM-functionality in their BIOS.
Therefore, TrustedGRUB is not able to make use of the TPM and works as a regular
GRUB. The only functionality you can then use is the "checkfile"-option to verify
files prior booting. But the measurements will not be extended into any PCR.

> Any ideas on how to fix this?

You can't, Dell has to provide a BIOS with CRTM-functionality.

Sorry, for the bad news and best regards,
Marcel