Re: [Trustedgrub-users] Trusted Grub Installation

[Marcel S. <tru...@se...>]

Hi Neha,

> After reboot ,I got message like-
> Trusted GRUB 1.1.5 (http://trustedgrub.sf.net)
> [TPM detected !] (581K lower /3388564K upper memory)
> from the above message i am not able to come conclusion that trusted grub
> is installed successfully or not or It is a error then how to resolve it
> and what is the reason?

Have a look at the first and second line on your boot screen.
It states "Trusted GRUB 1.1.5" and "TPM detected".
This looks promising to me ;-)

> If it is installed sucessfully why grub menu is not coming and how to use
> trusted grub?

I can't tell from here, why your menu.lst doesn't show. On which  
filesystem is it stored
and where does it lie? Can you send me a file listing of your /boot directory?

> If any link is there regard trusted grub that can tell in detail how it
> will work ,where it will stored its result?

The results will be stored inside the PCRs of your TPM.
Under Linux, have a look at them via:

$ cat /sys/class/misc/tpm0/device/pcrs
PCR-00: 47 04 3C 07 CA 0D CA 94 17 42 84 00 FD 25 2A 37 E2 20 0C 3B
PCR-01: 58 4F C0 5A 1A 07 C3 15 56 A3 08 36 94 E4 09 F5 33 20 3E E1
PCR-02: 53 DE 58 4D CE F0 3F 6A 7D AC 1A 24 0A 83 58 93 89 6F 21 8D
[...]
PCR-22: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
PCR-23: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

If you see, that PCRs 8,9,12 and 14 are non-zero, than it works.
In the README, you'll find an explanation of which values are stored  
inside which PCR.

* PCR 4 contains MBR information and stage1
* PCR 8 contains bootloader information stage2 part1
* PCR 9 contains bootloader information stage2 part2
* PCR 12 contains all commandline arguments from menu.lst and those  
entered in the shell
* PCR 13 contains all files checked via the checkfile-routine
* PCR 14 contains all files which are actually loaded (e.g., Linux  
kernel, initrd, modules...)

Best regards,
Marcel