Re: [edk2-devel] [PATCH 4/4] ArmVirtPkg/ArmVirtQemu: add optional support for TPM2 measured boot

2020-01-13 Thread Laszlo Ersek
On 01/13/20 02:55, Gary Lin wrote: > On Fri, Jan 10, 2020 at 12:32:02AM +, Yao, Jiewen wrote: >> Hi Marc-André >> Would you please share some information on how to use vTPM with QEMU? >> >> I saw https://github.com/stefanberger/qemu-tpm >> >> But I am not sure if that has been integrated to

Re: [edk2-devel] [PATCH 4/4] ArmVirtPkg/ArmVirtQemu: add optional support for TPM2 measured boot

2020-01-12 Thread Gary Lin
On Fri, Jan 10, 2020 at 12:32:02AM +, Yao, Jiewen wrote: > Hi Marc-André > Would you please share some information on how to use vTPM with QEMU? > > I saw https://github.com/stefanberger/qemu-tpm > > But I am not sure if that has been integrated to official QEMU release? > Actually the TPM

Re: [edk2-devel] [PATCH 4/4] ArmVirtPkg/ArmVirtQemu: add optional support for TPM2 measured boot

2020-01-09 Thread Yao, Jiewen
Hi Marc-André Would you please share some information on how to use vTPM with QEMU? I saw https://github.com/stefanberger/qemu-tpm But I am not sure if that has been integrated to official QEMU release? > -Original Message- > From: Laszlo Ersek > Sent: Thursday, January 9, 2020 9:07

Re: [edk2-devel] [PATCH 4/4] ArmVirtPkg/ArmVirtQemu: add optional support for TPM2 measured boot

2020-01-09 Thread Laszlo Ersek
On 01/09/20 01:51, Yao, Jiewen wrote: > Hi > Comment for the warning: >>> WARNING: TPM2 Event log has HashAlg unsupported by PCR bank (0xC) >>> WARNING: TPM2 Event log has HashAlg unsupported by PCR bank (0xD) > > The reason is that: The DSC added all HASH algorithm to the TCG2 driver. >

Re: [edk2-devel] [PATCH 4/4] ArmVirtPkg/ArmVirtQemu: add optional support for TPM2 measured boot

2020-01-08 Thread Yao, Jiewen
Hi Comment for the warning: > > WARNING: TPM2 Event log has HashAlg unsupported by PCR bank (0xC) > > WARNING: TPM2 Event log has HashAlg unsupported by PCR bank (0xD) The reason is that: The DSC added all HASH algorithm to the TCG2 driver. (SHA1/SHA256/SHA384/SHA512/SM3). But the current TPM

Re: [edk2-devel] [PATCH 4/4] ArmVirtPkg/ArmVirtQemu: add optional support for TPM2 measured boot

2020-01-08 Thread Laszlo Ersek
(CC Marc-André and Jiewen) On 01/08/20 15:13, Ard Biesheuvel wrote: > On Tue, 7 Jan 2020 at 18:37, Laszlo Ersek wrote: >> On 01/07/20 10:48, Ard Biesheuvel wrote: >>> + gEfiSecurityPkgTokenSpaceGuid.PcdTpmBaseAddress|0x0 >>> + gEfiSecurityPkgTokenSpaceGuid.PcdTpm2InitializationPolicy|1 >>> +

Re: [edk2-devel] [PATCH 4/4] ArmVirtPkg/ArmVirtQemu: add optional support for TPM2 measured boot

2020-01-08 Thread Ard Biesheuvel
On Tue, 7 Jan 2020 at 18:37, Laszlo Ersek wrote: > > On 01/07/20 10:48, Ard Biesheuvel wrote: > > Duplicate the TPM2_ENABLE and TPM2_CONFIG_ENABLE build time flags that > > already exist in OvmfPkg, and wire them up in the .DSC and .FDF so > > that setting those flags produces a ArmVirtQemu build

Re: [edk2-devel] [PATCH 4/4] ArmVirtPkg/ArmVirtQemu: add optional support for TPM2 measured boot

2020-01-07 Thread Laszlo Ersek
On 01/07/20 10:48, Ard Biesheuvel wrote: > Duplicate the TPM2_ENABLE and TPM2_CONFIG_ENABLE build time flags that > already exist in OvmfPkg, and wire them up in the .DSC and .FDF so > that setting those flags produces a ArmVirtQemu build that implements > measured boot using a TPM provided by

[edk2-devel] [PATCH 4/4] ArmVirtPkg/ArmVirtQemu: add optional support for TPM2 measured boot

2020-01-07 Thread Ard Biesheuvel
Duplicate the TPM2_ENABLE and TPM2_CONFIG_ENABLE build time flags that already exist in OvmfPkg, and wire them up in the .DSC and .FDF so that setting those flags produces a ArmVirtQemu build that implements measured boot using a TPM provided by QEMU and described in the device tree. Note that