In order to access the TPM enablement in the BIOS, you need to assert physical presence. The way to assert such in a lenovo laptop at least is by holding the fn key down while powering it up. After that, enter the BIOS setup, and then you should find the option to enable it in the security menu.
Thanks, Rajiv Andrade Security Development IBM Linux Technology Center On 30-08-2011 03:51, Nikolay Rysev wrote: > Hello! > > I cannot get to work TPM Infineon 1.2.3.17: > > $ dmesg | tail -n 1 > [ 1872.871378] tpm_tis tpm_tis: 1.2 TPM (device-id 0xB, rev-id 16) > > $ sudo tpm_version > TPM 1.2 Version Info: > Chip Version: 1.2.3.17 > Spec Level: 2 > Errata Revision: 2 > TPM Vendor ID: IFX > Vendor Specific data: 03110008 00 > TPM Version: 01010000 > Manufacturer Info: 49465800 > > $ sudo tpm_selftest > TPM Test Results: bfbff5bf ff8f > > $ sudo tpm_takeownership > Enter owner password: > Confirm password: > Enter SRK password: > Confirm password: > Tspi_TPM_TakeOwnership failed: 0x00000007 - layer=tpm, code=0007 (7), > TPM is disabled > > tpm_setenable does not work (I get Authentication failed massages, but > laptop is new and there are cannot be an ownership. Well-known key > does not help). > Physical presence authorization gives "Bad physical presence value". > I've also tried to run tpm_setpresence --assert in single-user mode: > first run of tpm_setpresence after tcsd restart results to "Bad > parameter", on second and above it says "Not implemented". > > I cannot find any TPM-related options in BIOS, one thing that I found > is ask for TPM clear on reset security defaults (does not help too). > I'm using tpm-tools 1.3.6 and trousers 0.3.7. > > Any ideas how to get it work? > Thanks in advance! > > -- > wbr, > Nikolay > > ------------------------------------------------------------------------------ > Special Offer -- Download ArcSight Logger for FREE! > Finally, a world-class log management solution at an even better > price-free! And you'll get a free "Love Thy Logs" t-shirt when you > download Logger. Secure your free ArcSight Logger TODAY! > http://p.sf.net/sfu/arcsisghtdev2dev > _______________________________________________ > TrouSerS-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/trousers-users ------------------------------------------------------------------------------ Special Offer -- Download ArcSight Logger for FREE! Finally, a world-class log management solution at an even better price-free! And you'll get a free "Love Thy Logs" t-shirt when you download Logger. Secure your free ArcSight Logger TODAY! http://p.sf.net/sfu/arcsisghtdev2dev _______________________________________________ TrouSerS-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/trousers-users
