Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Migrate coreboot TPM event log entries to UEFI payload #278

Closed
miczyg1 opened this issue Dec 5, 2022 · 1 comment
Closed

Migrate coreboot TPM event log entries to UEFI payload #278

miczyg1 opened this issue Dec 5, 2022 · 1 comment

Comments

@miczyg1
Copy link
Contributor

miczyg1 commented Dec 5, 2022

Dasharo version
Any

Dasharo variant
Any

Affected component(s) or functionality
TPM event log

Brief summary
Currently, the coreboot event log entries are not propagated to the UEFI payload so all information what was measured to PCRs is lost when EDK2 TPM drivers kick in. This results in the inconsistent TPM event log with PCRs being returned from UEIF to OS.

How reproducible1
100%

How to reproduce

Steps to reproduce the behavior:

  1. Use tpm2 tools event log utility to calculate final PCRs values and compare them to PCR values taken from TPM.

Expected behavior
Calculated PCR values are identical to those read from TPM.

Actual behavior
Calculated PCR values are not identical to those read from TPM.

Screenshots
None

Additional context
None

Solutions you've tried
None

@macpijan
Copy link
Contributor

Seems to be a duplicate of: #455 - which provides more context and discussion already.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants