|
22 | 22 | <link rel="stylesheet" type="text/css" href="https://apalos.github.io/theme/font-awesome/css/solid.css"> |
23 | 23 |
|
24 | 24 |
|
25 | | - <link href="https://apalos.github.io/feeds/all.atom.xml" type="application/atom+xml" rel="alternate" title="Volatile rumblings of a spotted mind Atom"> |
| 25 | + <link href="https://apalos.github.io/feeds/all.atom.xml" type="application/atom+xml" rel="alternate" title="Volatile rumblings Atom"> |
26 | 26 |
|
27 | 27 |
|
28 | 28 |
|
|
34 | 34 | <meta name="keywords" content="Bootloaders, Security, U-Boot, UEFI, TPM"> |
35 | 35 |
|
36 | 36 |
|
37 | | -<meta property="og:site_name" content="Volatile rumblings of a spotted mind"/> |
| 37 | +<meta property="og:site_name" content="Volatile rumblings"/> |
38 | 38 | <meta property="og:title" content="EFI TCG2 protocol in U-Boot and QEMU"/> |
39 | 39 | <meta property="og:description" content="TPMs are starting to play an important role in system security and integrity. So let's take a look on the latest U-Boot additions enabling TPMs when booting with UEFI"/> |
40 | 40 | <meta property="og:locale" content="en_US"/> |
|
51 | 51 | <meta property="article:tag" content="TPM"/> |
52 | 52 | <meta property="og:image" content="site_images/profile.png"> |
53 | 53 |
|
54 | | - <title>Volatile rumblings of a spotted mind – EFI TCG2 protocol in U-Boot and QEMU</title> |
| 54 | + <title>Volatile rumblings – EFI TCG2 protocol in U-Boot and QEMU</title> |
55 | 55 |
|
56 | 56 | </head> |
57 | 57 | <body class="light-theme"> |
|
65 | 65 | <a href="https://apalos.github.io"></a> |
66 | 66 | </h1> |
67 | 67 |
|
68 | | -<p>Volatile rumblings of a spotted mind</p> |
| 68 | +<p>Volatile rumblings</p> |
69 | 69 |
|
70 | 70 | <nav> |
71 | 71 | <ul class="list"> |
@@ -152,14 +152,15 @@ <h2><strong>Using SWTPM</strong></h2> |
152 | 152 | TPM emulator that works under QEMU. It provides a memory mapped device which |
153 | 153 | adheres to the <a href="https://trustedcomputinggroup.org/wp-content/uploads/TCG_PCClientTPMInterfaceSpecification_TIS__1-3_27_03212013.pdf" target="_blank">TCG TPM Interface Specification</a>. |
154 | 154 | The problem is that U-Boot had no support for memory mapped TPMs, which is |
155 | | -exactly what <a href="https://lore.kernel.org/u-boot/20210707162604.84196-1-ilias.apalodimas@linaro.org/" target="_blank">this</a> patchset does.</p> |
| 155 | +exactly what <a href="https://lore.kernel.org/u-boot/20211109070223.76456-1-ilias.apalodimas@linaro.org/" target="_blank">this</a> patchset does.</p> |
156 | 156 | <h3><strong>Building U-Boot</strong></h3> |
157 | | -<p>At the time of this article the U-Boot patches are under review, so we need to |
| 157 | +<p><s>At the time of this article the U-Boot patches are under review, so we need to |
158 | 158 | apply them manually.</p> |
159 | | -<p>So download the patches prepare your U-Boot binary.</p> |
| 159 | +<p>So download the patches prepare your U-Boot binary.</s> |
| 160 | +Patches are now in U-Boot mainline and the arm64 defconfig has the |
| 161 | +required config options enabled.</p> |
160 | 162 | <div class="highlight"><pre><span></span><code>git clone https://github.com/u-boot/u-boot.git |
161 | 163 | <span class="nb">pushd</span> u-boot |
162 | | -git am <patches <span class="k">for</span> mmio tpm support> |
163 | 164 | make qemu_arm64_defconfig |
164 | 165 | make menuconfig |
165 | 166 | </code></pre></div> |
@@ -538,7 +539,7 @@ <h3><strong>Reading the EventLog</strong></h3> |
538 | 539 | { |
539 | 540 | "@context" : "http://schema.org", |
540 | 541 | "@type" : "Blog", |
541 | | - "name": " Volatile rumblings of a spotted mind ", |
| 542 | + "name": " Volatile rumblings ", |
542 | 543 | "url" : "https://apalos.github.io", |
543 | 544 | "image": "site_images/profile.png", |
544 | 545 | "description": "" |
|
0 commit comments