The way this works is that the tpm event log is used to attempt to reconstruct pcr0. If it doesn't match the value in the tpm pcr0 then there is a bug or malware.
The same report was brought into fwupd upstream. Various artifacts were captured and the conclusion is this is a BIOS bug. It should be reported to the board vendor to be fixed. https://github.com/fwupd/fwupd/issues/6574 ** Bug watch added: github.com/fwupd/fwupd/issues #6574 https://github.com/fwupd/fwupd/issues/6574 ** Changed in: fwupd (Ubuntu) Status: New => Opinion ** Also affects: fwupd via https://github.com/fwupd/fwupd/issues/6574 Importance: Unknown Status: Unknown -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/2047374 Title: TPM PCR0 recontruction fails on Pluton fTPM To manage notifications about this bug go to: https://bugs.launchpad.net/fwupd/+bug/2047374/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
