Jimmy,
I found it. The problem was that lcp_crtpol sets a default version of 0
in the policy structure. Apparently, you actually have to have a version
of 1, so the command lcp_crtpol -m mle_hash -v 1 -t hashonly -o lcp.pol
is what works.
Thanks for your help.
Charles
From: Wei, Gan
Can you provide the detailed steps you have done for generate the LCP policy,
and also the grub.cfg?
It is quite possible that you gave a wrong cmdline for tboot hash generating or
you specified incorrect cmdline for tboot.gz in grub.cfg.
You should generate mlehash as below according to your t