Re: [tboot-devel] PCR values?

2016-09-01 Thread Brian E Luckau
In the past using tboot 1.8.x and versions of trousers, tpm tools, etc, etc. that came with the distros, I was able to see the PCR values with: cat /sys/class/misc/tpm0/device/pcrs Currently I'm in CentOS 7.2 and have compliled and installed tboot 1.9.4. I see this, which with my limited knowl

Re: [tboot-devel] PCR values?

2016-09-01 Thread Jan Schermer
Do you have the correct TPM driver loaded in kernel? Does /sys/class/misc/tpm0 exist? AFAIK you can TXT-launch a kernel that has no driver (as it is likely loaded in initramfs or later anyway), txt-stat will probably also work even without a working in the kernel... Jan > On 01 Sep 2016, at 1

[tboot-devel] PCR values?

2016-09-01 Thread Ahmed, Safayet (GE Global Research)
The location of the "pcrs" file is changed in newer kernels. Try running "find /sys -name pcrs". This will show the path of the "pcrs" file in newer kernels. On one of my systems, it is "/sys/devices/pnp0/00:0b/pcrs". -Original Message- From: Brian E Luckau [mailto:bluc...@sgi.com] Sent

Re: [tboot-devel] PCR values?

2016-09-01 Thread Ross Philipson
On 09/01/2016 10:55 AM, Jan Schermer wrote: > Do you have the correct TPM driver loaded in kernel? Does > /sys/class/misc/tpm0 exist? > AFAIK you can TXT-launch a kernel that has no driver (as it is likely loaded > in initramfs or later anyway), txt-stat will probably also work even without > a

Re: [tboot-devel] reset after GETSEC[SENTER] on redhat platforms

2016-09-01 Thread Brian E Luckau
Hi, Whever we use tboot 1.9.4 on platforms such as RHEL 7.3 beta, or CentOS 7.2, with Intel TXT enabled in the BIOS, it reboots constantly and the last thing we see before the reboot is: TBOOT: setting MTRRs for acmod: base=0x7bf0, size=0x2, num_pages=32 TBOOT: The maximum allowed MTRR