Cihula, Joseph wrote:
>> From: Martin Pirker [mailto:martin.pir...@iaik.tugraz.at]
>> another BIOS update, another try....
>>
>> Intel DQ45CB, bios rev 103(20091104)
>> TBoot e57acd4d1460

> The work around is to disable legacy USB support.

Indeed, that's the trick, thank you!
I can confirm successful tboot, done with LCP "any" and "hashonly" policy.

- as this disables the keyboard one has to control GRUB menu by serial console
- for some reason GRUB only likes serial speed 9600, so tboot needs to
  be set to 9600, too
- booted with a 2.6.30 kernel with TXT + Intel TPM patches
- all TPM NV + TXT LCP stuff done solely with jTpmTools


- I can also confirm a successful tboot on a HP dc7900 with vanilla 2.6.32
  No TXT patching necessary :-)


One board nailed - what about the others?

- Is there a way to identify the BIOSs which seemingly do contain some
  bad code which turns the boards to bricks upon SINIT?
  I don't like the trial and error strategy...

- Can anybody report tboot experiences with other Q45 boards, e.g.
  Asus P5Q-EM DO/P5Q-VM DO   (Intel TPM)
  Fujitsu D2831-S/D2836-S   (IFX TPM)
  Gigabyte GA-EQ45M-S2   (IFX TPM)
  ...and laptops?


Best regards,
  Martin


------------------------------------------------------------------------------
Join us December 9, 2009 for the Red Hat Virtual Experience,
a free event focused on virtualization and cloud computing. 
Attend in-depth sessions from your desk. Your couch. Anywhere.
http://p.sf.net/sfu/redhat-sfdev2dev
_______________________________________________
tboot-devel mailing list
tboot-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/tboot-devel

Reply via email to