Re: [Trustedgrub-users] Running Grub (TrustedGRUB) from linux. No TPM Detected! Why

[Marcel S. <tru...@se...>]

Hi Bill,

> So at this point I figure I was successful. Now I wanted to create my
> own check file. But it's risky. So I saw you  can verify_pcr.

It's not risky, you can create the checkfile and first test it within
the GRUB command shell (upon boot, press 'c' and type checkfile
(hd0,x)/path/to/checkfile). If everything works, you can add it to your
menu.lst.

> I have not seen any verify_pcr command whatsoever. I ran Grub,
> thinking it would have the command. What I got is this:

It is in the util-folder of the TrustedGRUB-package and is compiled
automatically, when you run the build_tgrub.sh-install-script.

> [root@localhost home]# grub Probing devices to guess BIOS drives.
> This may take a long time.
> Trusted GRUB 1.1.5 (http://trustedgrub.sf.net) [ No TPM detected! ]
> (640K lower / 3072K upper memory)

In order to detect, whether a TPM is available, BIOS calls are required
to be executed. Since Linux is already in protected mode, these calls
will not work and you will - inside the GRUB shell under Linux - always
see, that no TPM is available. Please boot and see, what TrustedGRUB
says when the menu is shown. You should then be able to see "TPM detected".

Best regards!
Marcel