Re: tpm_tis TPM2.0 not detected on cold boot

2019-01-10 Thread Michael Niewöhner
On Thu, 2019-01-10 at 19:28 +0200, Jarkko Sakkinen wrote: > On Fri, Jan 04, 2019 at 04:28:24PM +0100, Michael Niewöhner wrote: > > root@debian:~# tpm2_pcrlist > > ERROR:tcti:src/util/io.c:102:write_all() failed to write to fd 3: Operation > > not > > permitted > > ERROR:tcti:src/tss2-tcti/tcti-dev

Re: tpm_tis TPM2.0 not detected on cold boot

2019-01-10 Thread Michael Niewöhner
On Thu, 2019-01-10 at 19:19 +0200, Jarkko Sakkinen wrote: > On Thu, Jan 03, 2019 at 04:47:31PM +0100, Michael Niewöhner wrote: > > On Thu, 2019-01-03 at 17:04 +0200, Jarkko Sakkinen wrote: > > > On Thu, Jan 03, 2019 at 02:38:11PM +0100, Michael Niewöhner wrote: > > > > On Thu, 2019-01-03 at 15:27 +

Re: tpm_tis TPM2.0 not detected on cold boot

2019-01-10 Thread Jarkko Sakkinen
On Fri, Jan 04, 2019 at 04:28:24PM +0100, Michael Niewöhner wrote: > root@debian:~# tpm2_pcrlist > ERROR:tcti:src/util/io.c:102:write_all() failed to write to fd 3: Operation > not > permitted > ERROR:tcti:src/tss2-tcti/tcti-device.c:86:tcti_device_transmit() wrong number > of > bytes written. E

Re: tpm_tis TPM2.0 not detected on cold boot

2019-01-10 Thread Jarkko Sakkinen
On Thu, Jan 03, 2019 at 04:47:31PM +0100, Michael Niewöhner wrote: > On Thu, 2019-01-03 at 17:04 +0200, Jarkko Sakkinen wrote: > > On Thu, Jan 03, 2019 at 02:38:11PM +0100, Michael Niewöhner wrote: > > > On Thu, 2019-01-03 at 15:27 +0200, Jarkko Sakkinen wrote: > > > > On Sun, Dec 23, 2018 at 12:55

Re: tpm_tis TPM2.0 not detected on cold boot

2019-01-04 Thread Michael Niewöhner
On Fri, 2019-01-04 at 16:28 +0100, Michael Niewöhner wrote: > On Fri, 2019-01-04 at 12:58 +0100, Michael Niewöhner wrote: > > On Thu, 2019-01-03 at 16:47 +0100, Michael Niewöhner wrote: > > > On Thu, 2019-01-03 at 17:04 +0200, Jarkko Sakkinen wrote: > > > > On Thu, Jan 03, 2019 at 02:38:11PM +0100,

Re: tpm_tis TPM2.0 not detected on cold boot

2019-01-04 Thread Michael Niewöhner
On Fri, 2019-01-04 at 12:58 +0100, Michael Niewöhner wrote: > On Thu, 2019-01-03 at 16:47 +0100, Michael Niewöhner wrote: > > On Thu, 2019-01-03 at 17:04 +0200, Jarkko Sakkinen wrote: > > > On Thu, Jan 03, 2019 at 02:38:11PM +0100, Michael Niewöhner wrote: > > > > On Thu, 2019-01-03 at 15:27 +0200,

Re: tpm_tis TPM2.0 not detected on cold boot

2019-01-04 Thread Michael Niewöhner
On Thu, 2019-01-03 at 16:47 +0100, Michael Niewöhner wrote: > On Thu, 2019-01-03 at 17:04 +0200, Jarkko Sakkinen wrote: > > On Thu, Jan 03, 2019 at 02:38:11PM +0100, Michael Niewöhner wrote: > > > On Thu, 2019-01-03 at 15:27 +0200, Jarkko Sakkinen wrote: > > > > On Sun, Dec 23, 2018 at 12:55:12PM +

Re: tpm_tis TPM2.0 not detected on cold boot

2019-01-03 Thread Michael Niewöhner
On Thu, 2019-01-03 at 17:04 +0200, Jarkko Sakkinen wrote: > On Thu, Jan 03, 2019 at 02:38:11PM +0100, Michael Niewöhner wrote: > > On Thu, 2019-01-03 at 15:27 +0200, Jarkko Sakkinen wrote: > > > On Sun, Dec 23, 2018 at 12:55:12PM +0100, Michael Niewöhner wrote: > > > > There is another issue but I

Re: tpm_tis TPM2.0 not detected on cold boot

2019-01-03 Thread Jarkko Sakkinen
On Thu, Jan 03, 2019 at 02:38:11PM +0100, Michael Niewöhner wrote: > On Thu, 2019-01-03 at 15:27 +0200, Jarkko Sakkinen wrote: > > On Sun, Dec 23, 2018 at 12:55:12PM +0100, Michael Niewöhner wrote: > > > There is another issue but I don't know if both are related. Maybe that's > > > just a > > > ti

Re: tpm_tis TPM2.0 not detected on cold boot

2019-01-03 Thread Michael Niewöhner
On Thu, 2019-01-03 at 15:41 +0200, Jarkko Sakkinen wrote: > On Sun, Dec 16, 2018 at 02:32:38PM +0100, Michael Niewöhner wrote: > > > dmesg cold boot with tpm_tis.interrupts=0 tpm_tis.force=1: > > -- > > > dmesg | grep -i tpm > > [0.0

Re: tpm_tis TPM2.0 not detected on cold boot

2019-01-03 Thread Jarkko Sakkinen
On Sun, Dec 16, 2018 at 02:32:38PM +0100, Michael Niewöhner wrote: > dmesg cold boot with tpm_tis.interrupts=0 tpm_tis.force=1: > -- > > dmesg | grep -i tpm > [0.00] Command line: initrd=\initrd-test console=ttyS0,115200n8 > break=pr

Re: tpm_tis TPM2.0 not detected on cold boot

2019-01-03 Thread Michael Niewöhner
On Thu, 2019-01-03 at 15:27 +0200, Jarkko Sakkinen wrote: > On Sun, Dec 23, 2018 at 12:55:12PM +0100, Michael Niewöhner wrote: > > There is another issue but I don't know if both are related. Maybe that's > > just a > > timing issue... > > > > root@debian:~# dd if=/dev/hwrng bs=1 count=1 > > dd: e

Re: tpm_tis TPM2.0 not detected on cold boot

2019-01-03 Thread Jarkko Sakkinen
On Sun, Dec 23, 2018 at 12:55:12PM +0100, Michael Niewöhner wrote: > There is another issue but I don't know if both are related. Maybe that's > just a > timing issue... > > root@debian:~# dd if=/dev/hwrng bs=1 count=1 > dd: error reading '/dev/hwrng': Operation not permitted > 0+0 records in > 0

Re: tpm_tis TPM2.0 not detected on cold boot

2019-01-01 Thread Michael Niewöhner
On Tue, 2019-01-01 at 11:38 -0500, Mimi Zohar wrote: > On Tue, 2019-01-01 at 17:15 +0100, Michael Niewöhner wrote: > > On Mon, 2018-12-31 at 16:17 -0500, Mimi Zohar wrote: > > > On Sun, 2018-12-30 at 14:22 +0100, Michael Niewöhner wrote: > > > > > > > > difference is that on a cold boot, the TPM t

Re: tpm_tis TPM2.0 not detected on cold boot

2019-01-01 Thread Mimi Zohar
On Tue, 2019-01-01 at 17:15 +0100, Michael Niewöhner wrote: > On Mon, 2018-12-31 at 16:17 -0500, Mimi Zohar wrote: > > On Sun, 2018-12-30 at 14:22 +0100, Michael Niewöhner wrote: > > > > > > difference is that on a cold boot, the TPM takes longer to initialize. > > > > > > Well, as I said. Waitin

Re: tpm_tis TPM2.0 not detected on cold boot

2019-01-01 Thread Michael Niewöhner
On Mon, 2018-12-31 at 16:17 -0500, Mimi Zohar wrote: > On Sun, 2018-12-30 at 14:22 +0100, Michael Niewöhner wrote: > > > > difference is that on a cold boot, the TPM takes longer to initialize. > > > > Well, as I said. Waiting for 10, 20 or even 60 seconds in the boot manager > > does > > not sol

Re: tpm_tis TPM2.0 not detected on cold boot

2018-12-31 Thread Mimi Zohar
On Sun, 2018-12-30 at 14:22 +0100, Michael Niewöhner wrote: > > difference is that on a cold boot, the TPM takes longer to initialize. > > Well, as I said. Waiting for 10, 20 or even 60 seconds in the boot manager > does > not solve the problem. So the problem is NOT that the TPM takes longer to

Re: tpm_tis TPM2.0 not detected on cold boot

2018-12-31 Thread Ken Goldman
On 12/30/2018 8:22 AM, Michael Niewöhner wrote: difference is that on a cold boot, the TPM takes longer to initialize. Well, as I said. Waiting for 10, 20 or even 60 seconds in the boot manager does not solve the problem. So the problem is NOT that the TPM takes longer to initialize. Even adding

Re: tpm_tis TPM2.0 not detected on cold boot

2018-12-31 Thread Ken Goldman
On 12/29/2018 10:33 PM, Mimi Zohar wrote: But the problem you've described is on a cold boot, not a soft reboot.  Both the soft reboot and kexec are working properly.  It seems the difference is that on a cold boot, the TPM takes longer to initialize. I would expect this. The TPM doesn't even

Re: tpm_tis TPM2.0 not detected on cold boot

2018-12-30 Thread Michael Niewöhner
On Sat, 2018-12-29 at 22:33 -0500, Mimi Zohar wrote: > On Tue, 2018-12-25 at 14:55 +0100, Michael Niewöhner wrote: > > On Sun, 2018-12-23 at 12:55 +0100, Michael Niewöhner wrote: > > > Hi Mimi, > > > > > > On Sat, 2018-12-22 at 17:53 -0500, Mimi Zohar wrote: > > > > On Sat, 2018-12-22 at 14:47 +01

Re: tpm_tis TPM2.0 not detected on cold boot

2018-12-29 Thread Mimi Zohar
On Tue, 2018-12-25 at 14:55 +0100, Michael Niewöhner wrote: > On Sun, 2018-12-23 at 12:55 +0100, Michael Niewöhner wrote: > > Hi Mimi, > > > > On Sat, 2018-12-22 at 17:53 -0500, Mimi Zohar wrote: > > > On Sat, 2018-12-22 at 14:47 +0100, Michael Niewöhner wrote: > > > > > > > When I remove the tim

Re: tpm_tis TPM2.0 not detected on cold boot

2018-12-25 Thread Michael Niewöhner
On Sun, 2018-12-23 at 12:55 +0100, Michael Niewöhner wrote: > Hi Mimi, > > On Sat, 2018-12-22 at 17:53 -0500, Mimi Zohar wrote: > > On Sat, 2018-12-22 at 14:47 +0100, Michael Niewöhner wrote: > > > > > When I remove the timeout and boot directly to the linux kernel, I get > > > that > > > "2314 T

Re: tpm_tis TPM2.0 not detected on cold boot

2018-12-23 Thread Michael Niewöhner
Hi Mimi, On Sat, 2018-12-22 at 17:53 -0500, Mimi Zohar wrote: > On Sat, 2018-12-22 at 14:47 +0100, Michael Niewöhner wrote: > > > When I remove the timeout and boot directly to the linux kernel, I get that > > "2314 TPM-self test error" since it has not finished, yet. The TPM is > > detected > >

Re: tpm_tis TPM2.0 not detected on cold boot

2018-12-22 Thread Mimi Zohar
On Sat, 2018-12-22 at 14:47 +0100, Michael Niewöhner wrote: > When I remove the timeout and boot directly to the linux kernel, I get that > "2314 TPM-self test error" since it has not finished, yet. The TPM is detected > by IMA and works fine then. > > Some more tests showed that any delay before

Re: tpm_tis TPM2.0 not detected on cold boot

2018-12-22 Thread Michael Niewöhner
Hi all, On Sun, 2018-12-16 at 14:32 +0100, Michael Niewöhner wrote: > Hi again, > > after my UEFI firmware mod/hack to flash the newest available Nuvoton firmware > to the NCPT650 the selftest error went away. Since then the TPM worked without > any further problems, at least after warm reboots.

tpm_tis TPM2.0 not detected on cold boot

2018-12-16 Thread Michael Niewöhner
Hi again, after my UEFI firmware mod/hack to flash the newest available Nuvoton firmware to the NCPT650 the selftest error went away. Since then the TPM worked without any further problems, at least after warm reboots. What I didn't notice before is that it does NOT work after a cold (re)boot. Th