TCG2 Physical Presence Support in OVMF

TCG2 Physical Presence Support in OVMF

[Jason Dickens]

All,
I'm working with a secure boot enabled OVMF build of EDK II and Xen and 
have questions about TCG2 support, both status in general and specific 
questions below.

I'm trying to get the TCG Physical Presence protocol to work or at least 
understand more about why it can't in my case.

Specifically, I have found a key function in 
DxeTcg2PhysicalPresenceLib.c called 
Tcg2PhysicalPresenceLibProcessRequest. This appears to be the method 
that gets user confirmation and then performs the requested operations 
after a reboot? However, I cannot determine where this function is 
called? If it is currently dead code then I would like to know where it 
should be called and why its not connected in?

BTW: I understand that on Xen i'm also going to have issues with the SMM 
piece due to q35 and SMRAM problems, but independent of the Xen issues, 
I would like a clear picture of the current limitations in OVMF 
regarding TPM 2.0 operation? Are there functions needing implementation, 
that I could also contribute to?

Any help would be appreciated.

Thanks,
Jason

Re: TCG2 Physical Presence Support in OVMF

[Yao, Jiewen]

HI Jason
TCG2 PP support requires the presence of TPM2 hardware.
Does OVMF support TPM2 hardware?


If it supports, you can add code in BDS.
You may refer to edk2\Vlv2TbltDevicePkg\Library\PlatformBdsLib\BdsPlatform.c.


Thank you
Yao Jiewen

> -----Original Message-----
> From: edk2-devel [mailto:edk2-devel-bounces@lists.01.org] On Behalf Of Jason
> Dickens
> Sent: Friday, June 30, 2017 12:13 AM
> To: edk2-devel@lists.01.org
> Subject: [edk2] TCG2 Physical Presence Support in OVMF
> 
> All,
> I'm working with a secure boot enabled OVMF build of EDK II and Xen and
> have questions about TCG2 support, both status in general and specific
> questions below.
> 
> I'm trying to get the TCG Physical Presence protocol to work or at least
> understand more about why it can't in my case.
> 
> Specifically, I have found a key function in
> DxeTcg2PhysicalPresenceLib.c called
> Tcg2PhysicalPresenceLibProcessRequest. This appears to be the method
> that gets user confirmation and then performs the requested operations
> after a reboot? However, I cannot determine where this function is
> called? If it is currently dead code then I would like to know where it
> should be called and why its not connected in?
> 
> BTW: I understand that on Xen i'm also going to have issues with the SMM
> piece due to q35 and SMRAM problems, but independent of the Xen issues,
> I would like a clear picture of the current limitations in OVMF
> regarding TPM 2.0 operation? Are there functions needing implementation,
> that I could also contribute to?
> 
> Any help would be appreciated.
> 
> Thanks,
> Jason
> _______________________________________________
> edk2-devel mailing list
> edk2-devel@lists.01.org
> https://lists.01.org/mailman/listinfo/edk2-devel