search

Rohde-Schwarz / TrustedGRUB2

DEPRECATED TPM enabled GRUB2 Bootloader
GNU General Public License v3.0
191 stars 78 forks source link

TPM Error on boot #52

Closed ernvalentino88 closed 2 years ago

ernvalentino88 commented 8 years ago

Hi, I've installed TrustedGRUB2 on an ubuntu 14.04 machine with a TPM v1.2. The installation was completed without errors, but when I reboot the PC this error while booting was show. What this error means? Thank you

Ernesto

neusdan commented 7 years ago

What exact error code / message is shown?

ernvalentino88 commented 7 years ago

Hi, thanks for answering. Unfortunately the only message shown on the screen is: TrustedGRUB2 Loading Tpm Error

and nothing else, that's why I asked...

johnwallace123 commented 7 years ago

Have you enabled the TPM in the BIOS? If the TPM is not available, trusted grub won't boot, and you'll get an error similar to that. Note that in most BIOSes, the TPM is not enabled in the factory default settings.

ernvalentino88 commented 7 years ago

TPM is enabled and I can use it.

neusdan commented 7 years ago

Hard to tell what's the problem here without even an error code. TPM hardware problem, TPM firmware problem or a BIOS bug for example.

johnwallace123 commented 7 years ago

When booting without TrustedGRUB, can you see the PCRs and the measurement log of the TPM?

Assuming RHEL7 or derivative, the PCRs are located at /sys/class/tpm/tpm0/device/pcrs and the measurement log can be found at /sys/kernel/security/tpm0/ascii_bios_measurements. Without TrustedGRUB, you should still see PCRs 0-7 populated with nonzero values and those corresponding measurements in the log.

Variables that are also of interest are /sys/class/tpm/tpm0/device/enabled and (same path)/temp_deactivated.

ernvalentino88 commented 7 years ago

Yes, I can see first 8 PCRs not filled with 0 and also IMA is working. I don' think the error is in the TPM, probably in the BIOS

johnwallace123 commented 7 years ago

Can you check to see if PR #54 solves your issue? It seems that there's a recent issue across many mainboard manufacturers that may cause a problem with TrustedGRUB2. The symptoms have been varied, but the solution seems to be universal.

securitykernel commented 2 years ago

Unfortunately, this project is deprecated and no longer maintained. I will be closing this issue.