search

Rohde-Schwarz / TrustedGRUB2

DEPRECATED TPM enabled GRUB2 Bootloader
GNU General Public License v3.0
193 stars 77 forks source link

TrustedGRUB2 fails to boot with TPM 1.2 on a HP desktop #45

Closed amitlimaye closed 3 years ago

amitlimaye commented 8 years ago

Hello i compiled the grub source from here and tried loading on my HP Z440 desktop. I have enabled the TPM security knob in my BIOS but i am seeing this error and my system refuses to Boot

+++++++++++++++++++++++++ rustedGRUB2 loading Welcome to TrustedGRUB2! TCG_HasgLogExtendEvent failed : 0x2 Aborted. Press any key to exit

+++++++++++++++++++++= Any ideas what am i doing wrong here. I looked the TCG PC spec the error number 0x2 seems to indicate that i got TCG_PC_LOGOVERFLOW it means insufficient memory to create log entry. What am i missing here my dmesg output when i boot without trusted grub shows this

tpm_tis 00:09: 1.2 TPM (device-id 0x1A, rev-id 16)

neusdan commented 8 years ago

Strange. Never seen this before. Probably a bios bug. Are you running the latest version?

amitlimaye commented 8 years ago

I got the source from the git tree. I was thinking BIOS bug as well i am going to try the same thing on a different vendor server. The TCG_PC_LOGOVERFLOW made me think if i needed to configure something in my BIOS or TPM chip like carving out a region for logs in NVRAM before i try to boot with this. The BIOS has no further options beyond enabling and disabling the chip. (or making it hidden). All those things are set as HP asks me to

neusdan commented 8 years ago

Do you have the latest BIOS version installed?

amitlimaye commented 8 years ago

havent checked but i got this desktop from HP last week will reach out to HP to check it

-SIGTERM amit

Humanity's first sin was faith, Its first virtue doubt

On Thu, Jul 14, 2016 at 11:49 AM, Daniel Neus notifications@github.com wrote:

Do you have the latest BIOS version installed?

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/Rohde-Schwarz-Cybersecurity/TrustedGRUB2/issues/45#issuecomment-232757064, or mute the thread https://github.com/notifications/unsubscribe/AIekfynzkxVVqyOp-Z4ZWCU5ZjuWSYCgks5qVoSggaJpZM4JL8oV .

amitlimaye commented 8 years ago

looks like my BIOS is a few versions old i have 2.14 the latest is 2.19

white00black commented 8 years ago

I have a similar issue, it does not work with version 1.4 and master. Try version 1.3, should work.

neusdan commented 8 years ago

Could you tell us what error exactly?

johnwallace123 commented 7 years ago

@amitlimaye @white00black: Can you try the code from PR #55 and see if that resolves your issue? It looks like there's a widespread bug in newer BIOSes that prevents appending to the TPM event log with certain calls.

securitykernel commented 3 years ago

Unfortunately, this project is deprecated and no longer maintained. I will be closing this issue.