My Intel motherboard has a TPM 2.0 chip. Ubuntu 13.04 seems to have a driver for it, but what does it do with it, anything? Can it be switched off/disabled?
The Trusted Platform Module TPM offers facilities for the secure generation of cryptographic keys, and limitation of their use, in addition to a random number generator. It also includes capabilities such as remote attestation and sealed storage.
TPM is disabled by default unless you want to use it. To enable do the following:
First login as root
and install Trousers and the TPM Tools:
Head to the directory where the Kernel modules are located /lib/modules/#.x.y-z-generic/kernel/drivers/char/tpm, there you'll find the modules you need:
For my machine it was sufficient to load tpm_tis.ko.
Now you should "see" the TPM (tpm0) in /sys/class/misc/ and be able to print the PCRs
If tpm_tis doesn't work on your machine, simply use trial and error for finding the right module. You can't damage stuff. Btw: if you like to load the Kernel module automatically, edit /etc/modules and add "tpm_tis" to the list of modules.
If you've got the right module loaded, start the tcsd. Notice: unlike to other distributions you can't invoke the tcsd in Ubuntu by
You need to type
If you like some debugging info, add -f:
Now you're ready to go:
Now you can take ownership of your TPM: