Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

TPM 1.2 chip not supported? A TPM2 device with the in-kernel resource manager is needed! #256

Closed
ReDTerraN opened this issue Oct 31, 2020 · 3 comments

Comments

@ReDTerraN
Copy link

Im currently struggling to implement clevis LUKS to my TPM 1.2 chip

While doing the following example:
echo "hi" | clevis encrypt tpm2 '{}' > hi.jwe
I get following message:
A TPM2 device with the in-kernel resource manager is needed!

having a look in /git/clevis/src/pins/tpm2 we find in file levis-encrypt-tpm2 following:

if [ -z "$TPM2TOOLS_DEVICE_FILE" ]; then
echo "A TPM2 device with the in-kernel resource manager is needed!" >&2
exit 1
fi

$TPM2TOOLS_DEVICE_FILE variable points here:

export TPM2TOOLS_TCTI_NAME=device
export TPM2TOOLS_DEVICE_FILE=
for dev in /dev/tpmrm?; do
[ -e "$dev" ] || continue
TPM2TOOLS_DEVICE_FILE="$dev"
break
done

As we see we look at /dev/tpmrm which does not exist on a tpm 1.2 system. which only has /dev/tpm0

Is this working as expected? is tpm 1.2 not supported?

Im currently using a DELL LATITUDE 7240 with following version
$ tpm_version
TPM 1.2 Version Info:
Chip Version: 1.2.41.1
Spec Level: 2
Errata Revision: 3
TPM Vendor ID: ATML
TPM Version: 01010000
Manufacturer Info: 41544d4c

@yrien30
Copy link
Contributor

yrien30 commented Oct 31, 2020

Clevis don't support TPM 1.2 look here: #84

@ReDTerraN
Copy link
Author

@yrien30 Thanks for the fast response :) I will need to get myself a newer Laptop to get clevis running.

@oldium
Copy link
Contributor

oldium commented Jul 2, 2024

If you still have the old laptop, you could try #462 work 😁

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants