Skip to content

TPM 1.2 chip not supported? A TPM2 device with the in-kernel resource manager is needed! #256

Closed
@ReDTerraN

Description

@ReDTerraN

Im currently struggling to implement clevis LUKS to my TPM 1.2 chip

While doing the following example:
echo "hi" | clevis encrypt tpm2 '{}' > hi.jwe
I get following message:
A TPM2 device with the in-kernel resource manager is needed!

having a look in /git/clevis/src/pins/tpm2 we find in file levis-encrypt-tpm2 following:

if [ -z "$TPM2TOOLS_DEVICE_FILE" ]; then
echo "A TPM2 device with the in-kernel resource manager is needed!" >&2
exit 1
fi

$TPM2TOOLS_DEVICE_FILE variable points here:

export TPM2TOOLS_TCTI_NAME=device
export TPM2TOOLS_DEVICE_FILE=
for dev in /dev/tpmrm?; do
[ -e "$dev" ] || continue
TPM2TOOLS_DEVICE_FILE="$dev"
break
done

As we see we look at /dev/tpmrm which does not exist on a tpm 1.2 system. which only has /dev/tpm0

Is this working as expected? is tpm 1.2 not supported?

Im currently using a DELL LATITUDE 7240 with following version
$ tpm_version
TPM 1.2 Version Info:
Chip Version: 1.2.41.1
Spec Level: 2
Errata Revision: 3
TPM Vendor ID: ATML
TPM Version: 01010000
Manufacturer Info: 41544d4c

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions