OVMF commit 6612ff8 24/12/2021 - Windows 11 vm - TPM 2.0 error code 10

OVMF commit 6612ff8 24/12/2021 - Windows 11 vm - TPM 2.0 error code 10

[Daniele Crudo]

[-- Attachment #1: Type: text/plain, Size: 667 bytes --]

Hi,
I just compiled ovmf, updated to commit 6612ff8 (24/12/2021):
https://github.com/tianocore/edk2/commit/6612ff85611bc2be16dc0fd5de0e1413df88941a

The build command:
build -a X64 -b RELEASE -D SECURE_BOOT_ENABLE -D TPM_ENABLE -D FD_SIZE_4MB -p OvmfPkg/OvmfPkgX64.dsc -t GCC5

And used OVMF_CODE.fd and OVMF_VARS.fd for my windows 11 vm in qemu.
Looking at system devices, Windows 11 now can't start TPM 2.0 device (Error code 10).
I also tried to uninstall tpm and reinstall, same issue.

Switching back to 202108 stable version and no issue.
I can try to bisect to find the commit causing the issue, but maybe you are faster in finding what broke it.

[-- Attachment #2: Type: text/html, Size: 842 bytes --]

Re: [edk2-devel] OVMF commit 6612ff8 24/12/2021 - Windows 11 vm - TPM 2.0 error code 10

[Daniele Crudo]

[-- Attachment #1: Type: text/plain, Size: 245 bytes --]

I found the offending commit:
OvmfPkg: rework TPM configuration
https://github.com/tianocore/edk2/commit/4de8d61bcec02a13ceed84f92b0cf3ea58adf9c5

With this commit applied windows 11 reports error code 10 with emulated qemu/libvirt tpm 2.0

[-- Attachment #2: Type: text/html, Size: 388 bytes --]

Re: [edk2-devel] OVMF commit 6612ff8 24/12/2021 - Windows 11 vm - TPM 2.0 error code 10

[Daniele Crudo]

[-- Attachment #1: Type: text/plain, Size: 237 bytes --]

My bad, my build argument was wrong, and it was also written in the description of the commit.
-D TPM_ENABLE doesn't exist anymore, and it must be replaced with  -D TPM1_ENABLE (tpm 1.2) or with  -D TPM2_ENABLE (tpm 2.0)

Sorry!

[-- Attachment #2: Type: text/html, Size: 265 bytes --]