HOTP asked to be resealed even if TOTP good (Picks up on a reinstalled OS even if firmware measurements haven't changed) #1935

tlaurion · 2025-03-17T23:54:37Z

Fixes #1562
Supeseeds #1934 + reviewed changes

@marmarek/ @JonathonHall-Purism : good enough for merge?
EDIT: Thanks @JonathonHall-Purism for your review. All comments addressed.

Changes:

No more multi-console 3 attempts of TPMTOTP unsealing for race condition management when simultaneous TPM usage (introduced on Talos-2 port since dual console output on BMC and display consoles) : now if TPM unseal fails, we die
- Now die() asks to press Enter key, which is clearer for UX to understand what fails
Add of DEBUG + TRACE_FUNC calls and call stack traces (this is 280cb1f which is PR DEBUG+TRACE mode: provide a complete call stack trace on console / debug.log #1934)
Bumps hotp-verification to 1.7+ unreleased fixes under 1.71/1.8 so that hotp_verification output is on multi-lines even if hiccups on physical presence detection
Clarifies TPM counter creation + increment (I had bad time understanding why things were not working. Easier to understand and debug if needed in the future, easy to understand if board is in DEBUG+TRACE mode)
- Added TRACE_FUNC (which now outputs call hierarchy) along the way so that when in DEBUG+TRACE mode, call trace is now easy to follow for the future.
ident to tabs on all code reviewed.
When going to recovery shell: guide user into how to provide logs

tlaurion · 2025-03-18T00:20:41Z

@marmarek

This is ./docker_repro.sh make BOARD=qemu-coreboot-fbwhiptail-tpm2-hotp-prod_quiet USB_TOKEN=Nitrokey3NFC PUBKEY_ASC=pubkey.asc inject_gpg run with nk3 passed to testing qube.

Simulating OS reinstallation (wiping /boot/kexec*)

So same firmware, meaning:

Same firmware, with public key fused in rom and measured. So TPMTOTP good. Should warn that HOTP counter doesn't exist and prompt for HOTP reseal.
Let's wipe /boot/kexec* files:
Reboot. And Then:
Then selection non-existing default boot should pick up and guide user into signing and selecting default:
And then finally ask if TPM DUK must be created (optional):

@JonathonHall-Purism

Other changes

Stubborn users not following on screen instructions still are reminded that they haven't followed instructions. die() now requires to "Press a any key:
rest as usual.

tlaurion · 2025-03-18T00:40:42Z

@JonathonHall-Purism in debug.

This is ./docker_repro.sh make BOARD=qemu-coreboot-whiptail-tpm2-hotp USB_TOKEN=Nitrokey3NFC PUBKEY_ASC=pubkey.asc inject_gpg run

To show 280cb1f

User does reseal TPMTOTP/HOTP instead of reset TPM:

So now user is locked in into following steps:

Reset TPM, which reseals TPM/HOTP + updates checksums and sign /boot
Be happy (user guided to do the right thing

Full debug log of the combined steps (user doing Reset TPM as asked up to setting TPM DUK) with way more interesting call stack for everyone to understand:
full_debug_trace-from_tpm_reset-to_TPM_DUK.txt

Note:
For those who doesn't own a NK3/Librem Key : use non-hotp variants. qemu boards enforce canokey for GPG OpenPGP smartcard operations, follow targets/qemu.md, starting with ./docker_repro.sh make BOARD=qemu-coreboot-fbwhiptail-tpm2. You can learn Heads, or develop/contribute by running non prod_quiet versions, which will output in TRACE+DEBUG mode.

marmarek · 2025-03-18T11:24:02Z

To be clear - previously after OS reinstall (including removal of /boot/kexec* files) the recommendation was to do full TPM reset, and now just resealing the HOTP secret should work, right?

tlaurion · 2025-03-18T15:17:08Z

initrd/bin/unseal-hotp

@@ -29,7 +29,13 @@ mount_boot_or_die
 #counter_value=$(read_tpm_counter $counter | cut -f2 -d ' ' | awk 'gsub("^000e","")')
 #

-counter_value=$(cat $HOTP_COUNTER)
+#if HOTP_COUNTER is not present, bail out
+if [ ! -f $HOTP_COUNTER ]; then


@marmarek the issue was that previously, if TOTPM previously sealed/unsealed (measured boot from coreboot+heads), Heads was not looking to see if HOTP counter under /boot/kexec_hotp_counter was still present.

tlaurion · 2025-03-18T15:18:44Z

initrd/bin/gui-init

@@ -280,7 +269,10 @@ update_hotp() {
 		HOTP='N/A'
 	fi

-	if [[ "$CONFIG_TPM" = n && "$HOTP" = "Invalid code" ]]; then
+	if [[ "$HOTP" = "Invalid code" ]]; then


This check only verified if HOTP was invalid if no TPM was in use.

So now, if there is no /boot/kexec_hotp_counter and TPMTOTP can unseal, user is promoted to reseal HOTP alone (OS reinstall use case without firmware upgrade)

But what is we have kexec_rollback.txt? All of this doesn't make any sense: user should reset TPM here of more logic needs to be refactored.

tlaurion

@marmarek added comments in code: with this PR, HOTP counter not being present will guide user to only reseal HOTP and generate hashes and /boot detached signed digest files, as well as selecting default boot and propose to set TPM DUK.

So TPM reset is not needed anymore in case of OS re-installation for TPM1.
For TPM2, TPM primary handle still needs to be created+hashed, which is TPM Reset is advised for creation and hash creation advised for in output as well.

This is workaround for you issue.

Use TPM2_Quote for attestation #1480 is still the real solution to get rid of TPM2 primary handle (discussion at How does TPM2 MITM protection fit into Heads? #1655)
Getting rid of HOTP counter issue tracking is Make TOTP (+ HOTP) verification possible **without OS** installed #1651

JonathonHall-Purism

Thanks @tlaurion, strategy looks good to me and I left comments on some of the details 💯

initrd/bin/unseal-totp

initrd/etc/functions

JonathonHall-Purism · 2025-03-21T20:22:14Z

initrd/etc/functions

@@ -789,12 +820,17 @@ increment_tpm_counter() {
 	TRACE_FUNC
 	tpmr counter_increment -ix "$1" -pwdc '' |
 		tee /tmp/counter-$1 >/dev/null 2>&1 ||
-		die "TPM counter increment failed for rollback prevention. Please reset the TPM"
+		die "TPM counter increment failed for rollback prevention. Please reset the TPM. Press Enter to continue"
+		#TODO: why the die here needs to say to Press Enter to continue? Should be part of die call?


Maybe because oem-factory-reset has its own die()? It's not equivalent to this one though so you can't just delete it (kills some TOP_PID it captured rather than exiting) 🤔

initrd/etc/functions

tlaurion · 2025-03-25T22:29:37Z

initrd/bin/tpmr

@@ -719,7 +719,7 @@ tpm1_reset() {
 	DO_WITH_DEBUG tpm physicalsetdeactivated -c &>/dev/null
 	DO_WITH_DEBUG tpm forceclear &>/dev/null
 	DO_WITH_DEBUG tpm physicalenable &>/dev/null
-	DO_WITH_DEBUG tpm takeown -pwdo "$tpm_owner_password" &>/dev/null
+	DO_WITH_DEBUG --mask-position 3 tpm takeown -pwdo "$tpm_owner_password" &>/dev/null


DEBUG was exposing TPM owner passphrase on log + debug.log

tlaurion · 2025-03-25T22:33:42Z

initrd/.bash_history

@@ -5,9 +5,9 @@ find /boot/kexec*.txt | gpg --verify /boot/kexec.sig -
 #remove invalid kexec_* signed files
 mount /dev/sda1 /boot && mount -o remount,rw /boot && rm /boot/kexec* && mount -o remount,ro /boot
 #Generate keys on OpenPGP smartcard: 
-mount-usb && gpg --home=/.gnupg/ --card-edit
+mount-usb --mode rw && gpg --home=/.gnupg/ --card-edit


bash history now promotes mount-usb --mode rw. nitpick

initrd/etc/functions

…ives call hierarchy, fix HOTP resealing only on OS reinstall, clarify TPM increment workflow Signed-off-by: Thierry Laurion <[email protected]>

tlaurion · 2025-03-26T03:20:14Z

initrd/bin/gui-init

@@ -183,17 +183,6 @@ update_totp() {
 		TOTP="NO TPM"
 	else
 		TOTP=$(unseal-totp)
-		# On platforms using CONFIG_BOOT_EXTRA_TTYS multiple processes may try to


No more 3 attempts on boot to unseal TPMTOTP: if multiple consoles (Eg Talos-2 with display console + BMC, at worst we could intruduce small delay if race condition still happening, while die asks user to press Enter now, guiding to reseal TPMTOTP or reset TPM if unable to access TPM NVRAM.

tlaurion · 2025-03-26T16:20:39Z

Using it on nv41, wiped /boot/kexec* : simulating OS reinstall: ok
Tested under qemu tpm2:
- Wiped build///vtpm : reseal TPMTOTP/HOTP dies telling user reset tpm needed TPM not owned) : ok
- Wiped /boot/kexechotp : Reseal HOTP picks up when TPMTOTP is good: tests your reinstall case: ok

marmarek · 2025-03-27T12:49:08Z

Password prompt (order) is wrong - it says to enter GPG User PIN, but then asks for TPM Owner Password:

The GPG user PIN prompt comes after entering TPM owner password.

But then, after the prompt for updating default boot selection, it says to reset the TPM due to missing rollback counter. Wasn't it supposed to be not needed anymore?

marmarek · 2025-03-27T13:04:34Z

When I followed instructions to do TPM reset, it hanged on a pin prompt (and also a bit confusing that says admin pin attempts when the prompt is about user pin):

I waited for 5 minutes and nothing happened. LED on the Nitrokey is off.

marmarek · 2025-03-27T13:06:30Z

Oh, it actually did wait for something, I pressed Enter (without entering any PIN) and got this:

marmarek · 2025-03-27T13:08:03Z

At that prompt that hanged before, if I try to enter the user PIN, I got the same error after entering the first character, so it seems it wasn't really waiting for the PIN...

tlaurion · 2025-03-27T14:52:01Z

Preparing test environement

cd heads
#copying pubkey.asc to be injected in rom for testing.
cp ~/Insurgo_2024_no_expiration_date.asc pubkey.asc
#hardlinking test disk image to root.qcow2 used by qemu board
sudo cp -alf ~/qemu-disks/debian-12-2_luks.qcow2 /home/user/heads/build/x86/qemu-coreboot-fbwhiptail-tpm2-hotp-prod_quiet/root.qcow2
#Creating disk snapshot to revert to
sudo qemu-img snapshot ~/qemu-disks/debian-12-2_luks.qcow2 -c "kexec-signed"
#preparing host to mount partitions from raw disk image
sudo modprobe nbd
qemu-nbd --connect=/dev/nbd0 ./build/x86/qemu-coreboot-fbwhiptail-tpm2-hotp-prod_quiet/root.qcow2
sudo qemu-nbd --connect=/dev/nbd0 ./build/x86/qemu-coreboot-fbwhiptail-tpm2-hotp-prod_quiet/root.qcow2
#mounting boot partition from raw disk image
sudo mount /dev/nbd0p1 /media
#wiping Heads related /boot states signed under kexec.sig, including kexec_rollback.txt used for TPM counter rollback protection and TPM2 primary handle
sudo rm /media/kexec*
sudo umount /media
sudo qemu-nbd --disconnect /dev/nbd0
#creating snapshot to revert to so that /boot simulates a clean OS reinstall
sudo qemu-img snapshot ~/qemu-disks/debian-12-2_luks.qcow2 -c "kexec-wiped"

Used to iterate testing:

#wipe host vTPM (not TPM ownership: TPM blank)
sudo rm ./build/x86/qemu-coreboot-fbwhiptail-tpm2-hotp-prod_quiet/vtpm/*
#reset /boot to having no Heads related kexec*.txt files signed under kexec.sig/kexec_hotp_counter for HOTP
sudo qemu-img snapshot ~/qemu-disks/debian-12-2_luks.qcow2 -a "kexec-wiped"
#run qemu with NK3 passedthrough, with pubkey.asc injected in rom
./docker_repro.sh make BOARD=qemu-coreboot-fbwhiptail-tpm2-hotp-prod_quiet USB_TOKEN=Nitrokey3NFC PUBKEY_ASC=pubkey.asc inject_gpg run

Test case 1: TPM cleared, after OS install with Heads reownership done

sudo qemu-img snapshot ~/qemu-disks/debian-12-2_luks.qcow2 -a "kexec-wiped"
sudo rm ./build/x86/qemu-coreboot-fbwhiptail-tpm2-hotp-prod_quiet/vtpm/*
./docker_repro.sh make BOARD=qemu-coreboot-fbwhiptail-tpm2-hotp-prod_quiet USB_TOKEN=Nitrokey3NFC PUBKEY_ASC=pubkey.asc inject_gpg run

Power on:

Do not know. Try Generate new HOTP/TOTP secret on non-provisioned TPM:

Okok... i'll reset TPM as the ERROR message says I should do...:

Signs /boot stuff as well, order of prompts ok:

So we signed /boot, set TPMTOTP and sealed through reverse HOTP:

Heads detects no default boot was setuped, prompts

Onboards defining one + TPM DUK

Then prompts to sign changed /boot/kexec*.txt files...

TODO, fix

subshell calls messing up console output (GPG PIN warning vs die() prompts to press Enter key)
fix file descriptor leak (pipe) error
silence "Failed to setup async io, using sync io" prior of cryptsetup call (lvm code)

…hecksums. Warn user prior of effectively booting (shows console warning, wait 2s then reboot) Signed-off-by: Thierry Laurion <[email protected]>

tlaurion · 2025-03-28T16:07:53Z

My nk3 was having non default setting.

gpg --card-status

Signature PIN ....: not forced

Doing git rebase operations (and therefore signing commits individually) just doesn't make sense with USB Security dongle's protected private keys with Signature forced. Not sure if this toggle should be on actually, but out of scope of this PR.

Changing this for sake of testing.

gpg --card-edit
gpg/card> admin
Admin commands are allowed

gpg/card> help
quit           quit this menu
admin          show admin commands
help           show this help
list           list all available data
name           change card holder's name
url            change URL to retrieve key
fetch          fetch the key specified in the card URL
login          change the login name
lang           change the language preferences
salutation     change card holder's salutation
cafpr          change a CA fingerprint
forcesig       toggle the signature force PIN flag
generate       generate new keys
passwd         menu to change or unblock the PIN
verify         verify the PIN and list all data
unblock        unblock the PIN using a Reset Code
factory-reset  destroy all keys and data
kdf-setup      setup KDF for PIN authentication
key-attr       change the key attribute

gpg/card> forcesig

Seems like we come to a time where caching GPG User PIN is desired.

…red,yellow,green) Signed-off-by: Thierry Laurion <[email protected]>

… prompt for recovery shell access, state where debug logs are in centralized way Note for linuxboot#1888: warn in code is used mostly to actually warn user of something requiring his attention, and pausing for 2 seconds. Goal is: die: blocking: tell user that something failed, requiring acknowledgement for corrective actions. warn: display "WARNING:" prepended messages which pauses for 2 seconds prior of continuing. This is not an error, nor INFO INFO: gives a trace to the user when in QUIET mode, under /tmp/debug.log related to core components output, typically related to measurements traces. Consequently, putting what is currently under warn->INFO wold be console silenced. We want to get rid of manual "echo +++++" messages. So it seems we lack what is currently named INFO to go into measurement_log, and INFO (green), warn (yellow) and die (red) messages to console. Signed-off-by: Thierry Laurion <[email protected]>

Signed-off-by: Thierry Laurion <[email protected]>

… being set: observed in fbwhiptail-tpm2-hotp-prod_quiet 991 root 3272 S {gui-init} /bin/bash /bin/gui-init 2024 root 2792 S {kexec-select-bo} /bin/bash /bin/kexec-select-boot - 2025 root 1364 S sha256sum -c /tmp/kexec/kexec_default_hashes.txt 2105 root 2068 S /bin/bash Signed-off-by: Thierry Laurion <[email protected]>

…. Logs for first under usb.raw to check against HOTP reseal Signed-off-by: Thierry Laurion <[email protected]>

JonathonHall-Purism · 2025-04-15T16:49:35Z

@tlaurion Looked over the recent changes, could you cherry pick this tweak to finish addressing my nitpicks please 🙂 ad807f4

I see you have a few TODOs left to address, it looks OK to me otherwise, let me know when you would like further review of those fixes

…hrase equiv) + easthetic fixes Signed-off-by: Thierry Laurion <[email protected]>

…p_without_firmware_upgrade_boot_wiped-staging Signed-off-by: Thierry Laurion <[email protected]>

Asking to press Enter is more forgiving than "any key" and good, but we also have to actually continue on Enter instead of any key. Signed-off-by: Jonathon Hall <[email protected]>

… sleep one second before continuing Signed-off-by: Thierry Laurion <[email protected]>

…mpts Signed-off-by: Thierry Laurion <[email protected]>

…l selected containers prior of prompting for new DUK Signed-off-by: Thierry Laurion <[email protected]>

…nderstanding and debugging Signed-off-by: Thierry Laurion <[email protected]>

…d leaves 1 second to the user to read the notice Signed-off-by: Thierry Laurion <[email protected]>

tlaurion requested a review from JonathonHall-Purism March 18, 2025 00:21

tlaurion marked this pull request as draft March 18, 2025 00:21

tlaurion changed the title ~~WiP - HOTP asked to be resealed even if TOTP good (Picks up on a reinstalled OS even if firmware measurements haven't changed)~~ HOTP asked to be resealed even if TOTP good (Picks up on a reinstalled OS even if firmware measurements haven't changed) Mar 18, 2025

tlaurion marked this pull request as ready for review March 18, 2025 00:21

tlaurion commented Mar 18, 2025

View reviewed changes

tlaurion force-pushed the hotp_fixup_without_firmware_upgrade_boot_wiped branch from 6159012 to 75e766a Compare March 18, 2025 15:42

JonathonHall-Purism reviewed Mar 21, 2025

View reviewed changes

tlaurion marked this pull request as draft March 25, 2025 16:28

tlaurion force-pushed the hotp_fixup_without_firmware_upgrade_boot_wiped branch 4 times, most recently from 5cfcc73 to 47c696f Compare March 25, 2025 22:25

tlaurion commented Mar 25, 2025

View reviewed changes

tlaurion force-pushed the hotp_fixup_without_firmware_upgrade_boot_wiped branch 2 times, most recently from c38c13b to dae9e85 Compare March 25, 2025 22:33

tlaurion commented Mar 25, 2025

View reviewed changes

tlaurion mentioned this pull request Mar 25, 2025

DEBUG+TRACE mode: provide a complete call stack trace on console / debug.log #1934

Closed

tlaurion commented Mar 25, 2025

View reviewed changes

initrd/etc/functions Outdated Show resolved Hide resolved

Codebase up to TPM DUK: ident, add DEBUG+TRACE_FUNC, TRACE_FUNC now g…

1f6a975

…ives call hierarchy, fix HOTP resealing only on OS reinstall, clarify TPM increment workflow Signed-off-by: Thierry Laurion <[email protected]>

tlaurion force-pushed the hotp_fixup_without_firmware_upgrade_boot_wiped branch from dae9e85 to 1f6a975 Compare March 26, 2025 03:12

tlaurion requested a review from JonathonHall-Purism March 26, 2025 03:16

tlaurion assigned marmarek Mar 26, 2025

tlaurion marked this pull request as ready for review March 26, 2025 03:17

tlaurion commented Mar 26, 2025

View reviewed changes

tlaurion marked this pull request as draft March 27, 2025 13:17

tlaurion assigned tlaurion and unassigned marmarek Mar 27, 2025

gui-init: reboot as told to user if he refused to update+sign /boot c…

f9def6b

…hecksums. Warn user prior of effectively booting (shows console warning, wait 2s then reboot) Signed-off-by: Thierry Laurion <[email protected]>

tlaurion added 5 commits March 28, 2025 12:11

etc/functions: die+warn+INFO: add TRACE_FUNC and TODO to add colors (…

b5cb7ae

…red,yellow,green) Signed-off-by: Thierry Laurion <[email protected]>

WiP

0d3b3b6

Signed-off-by: Thierry Laurion <[email protected]>

WiP: so tpm reset+reboot+TPM DUK works. HOTP reseal fails at post DUK…

03c5d39

…. Logs for first under usb.raw to check against HOTP reseal Signed-off-by: Thierry Laurion <[email protected]>

tlaurion mentioned this pull request Apr 14, 2025

Refactor codebase so that GPG User PIN is cached if tested good (circumvent 'forcesig' security setting under Heads use case) #1955

Open

tlaurion mentioned this pull request Apr 16, 2025

cbmem -L output with TPM1.2 under coreboot 24.12 segfaults #1956

Closed

50 tasks

tlaurion and others added 8 commits April 28, 2025 14:09

kexec-seal-key: force minimal DUK to 12 chars (2 words DICEWARE passp…

6d90480

…hrase equiv) + easthetic fixes Signed-off-by: Thierry Laurion <[email protected]>

Merge+adapt remote-tracking branch 'osresearch/master' into hotp_fixu…

08c8862

…p_without_firmware_upgrade_boot_wiped-staging Signed-off-by: Thierry Laurion <[email protected]>

prompts: Only continue on Enter if we ask to press Enter

4ef7473

Asking to press Enter is more forgiving than "any key" and good, but we also have to actually continue on Enter instead of any key. Signed-off-by: Jonathon Hall <[email protected]>

kexec-select-boot+functions : Use NOTE instead of warn, and have NOTE…

d9730be

… sleep one second before continuing Signed-off-by: Thierry Laurion <[email protected]>

kexec-seal-key: have proper spacing before and after console read pro…

9c7ef3f

…mpts Signed-off-by: Thierry Laurion <[email protected]>

kexec-seal-key: make sure TPM DRK passphrase is verified to unlock al…

d10a424

…l selected containers prior of prompting for new DUK Signed-off-by: Thierry Laurion <[email protected]>

/etc/functions: simplify logic of increment_tpm_counter to ease its u…

19d400a

…nderstanding and debugging Signed-off-by: Thierry Laurion <[email protected]>

etc/functions: NOTE echoes to console before and after its message an…

67a7fd9

…d leaves 1 second to the user to read the notice Signed-off-by: Thierry Laurion <[email protected]>

tlaurion mentioned this pull request Apr 30, 2025

Unable to create rollback file after OS reinstall (Regenerate TOTP/HOTP) #1562

Open

35 tasks

Uh oh!

HOTP asked to be resealed even if TOTP good (Picks up on a reinstalled OS even if firmware measurements haven't changed) #1935

Are you sure you want to change the base?

HOTP asked to be resealed even if TOTP good (Picks up on a reinstalled OS even if firmware measurements haven't changed) #1935

Uh oh!

Conversation

tlaurion commented Mar 17, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

tlaurion commented Mar 18, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Simulating OS reinstallation (wiping /boot/kexec*)

Other changes

Uh oh!

tlaurion commented Mar 18, 2025

Uh oh!

marmarek commented Mar 18, 2025

Uh oh!

tlaurion Mar 18, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

tlaurion Mar 18, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

tlaurion Apr 30, 2025

Choose a reason for hiding this comment

Uh oh!

tlaurion left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

JonathonHall-Purism left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

JonathonHall-Purism Mar 21, 2025

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

tlaurion Mar 25, 2025

Choose a reason for hiding this comment

Uh oh!

tlaurion Mar 25, 2025

Choose a reason for hiding this comment

Uh oh!

Uh oh!

tlaurion Mar 26, 2025

Choose a reason for hiding this comment

Uh oh!

tlaurion commented Mar 26, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

marmarek commented Mar 27, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

marmarek commented Mar 27, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

marmarek commented Mar 27, 2025

Uh oh!

marmarek commented Mar 27, 2025

Uh oh!

tlaurion commented Mar 27, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Test case 1: TPM cleared, after OS install with Heads reownership done

Uh oh!

tlaurion commented Mar 28, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

JonathonHall-Purism commented Apr 15, 2025

Uh oh!

Uh oh!

tlaurion commented Mar 17, 2025 •

edited

Loading

tlaurion commented Mar 18, 2025 •

edited

Loading

tlaurion Mar 18, 2025 •

edited

Loading

tlaurion Mar 18, 2025 •

edited

Loading

tlaurion left a comment •

edited

Loading

tlaurion commented Mar 26, 2025 •

edited

Loading

marmarek commented Mar 27, 2025 •

edited

Loading

marmarek commented Mar 27, 2025 •

edited

Loading

tlaurion commented Mar 27, 2025 •

edited

Loading

tlaurion commented Mar 28, 2025 •

edited

Loading