HP 8530p Trusted Execution Technology and Tboot Implementation - Page 5

TPM TOOLS 1.3.1 Installation, LCP: Define Platform Owner Policy - pci serial port

Page 5 highlights

13.cd tboot.hg/txt-test 14.make install (this will create txt-test executable file, run './txt-stat' to read the serial messages from the memory buffer. Refer Appendix A for the sample tboot serial output). 15.edit the menu.lst to additional grub entry: title Fedora Core (Xen 3.3.0 with TXT) root (hd0,0) kernel /tboot.gz module /xen.gz iommu=required com1=115200,8n1 console=com1 module /vmlinuz-2.6.18.8-xen root=LABEL=/ ro console=tty0 console=ttyS0, 115200, 8n1 pci=nommconf (All in a single line. Please note that the 'console' parameter will have no effect here since the unit lacks any serial port) module /initrd-2.6.18.8-xen.img module /sinit.bin 16.Make sure to check the root location and 'root=LABEL=/' match with the first grub entry and points to the root partition. 17.Reboot the system. Enable TPM, VTD and TXT in the BIOS settings. 18.The next time you boot into the system, you can select the option at the boot menu to boot into 'Xen 3.3.0 with TXT'. Copy the latest sinit.bin file into /boot directory. Note: If the unit hangs after you boot into Tboot at the boot menu, check if you have any USB devices plugged in to your unit. Also disable USB Legacy Support in your BIOS settings (under F10: System Configuration Æ Device Configurations Æ USB legacy Support) and try to boot into Tboot again. TPM TOOLS 1.3.1 Installation 1. Open the terminal 2. cd ~/ 3. If required set the proxy options as, export http_proxy=: 4. Install wget if not already installed (yum install wget) 5. wget http://internap.dl.sourceforge.net/sourceforge/trousers/tpm-tools-1.3.1.tar.gz 6. Make sure you have 'automake', 'autoconf', 'libtool', 'gettext' and 'trousers' installed. 7. tar -xzvf tpm-tools-1.3.1.tar.gz 8. cd tpm-tools-1.3.1 9. ./configure 10. make 11.make install LCP: Define Platform Owner Policy Take TPM Ownership: 1. Open the terminal 2. sudo -s 3. ldconfig (in case of FC8 you may have to try '/sbin/ldconfig') 5

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20

5
13.
cd tboot.hg/txt-test
14.
make install (this will create txt-test executable file, run ‘./txt-stat’ to read the serial messages from
the memory buffer. Refer Appendix A for the sample tboot serial output).
15.
edit the menu.lst to additional grub entry:
title Fedora Core (Xen 3.3.0 with TXT)
root (hd0,0)
kernel /tboot.gz
module /xen.gz iommu=required com1=115200,8n1 console=com1
module /vmlinuz-2.6.18.8-xen root=LABEL=/ ro console=tty0
console=ttyS0, 115200, 8n1
pci=nommconf (All in a single line. Please note that the ‘console’ parameter will have no effect
here since the unit lacks any serial port)
module /initrd-2.6.18.8-xen.img
module /sinit.bin
16.
Make sure to check the root location and ‘root=LABEL=/’ match with the first grub entry and points
to the root partition.
17.
Reboot the system. Enable TPM, VTD and TXT in the BIOS settings.
18.
The next time you boot into the system, you can select the option at the boot menu to boot into
‘Xen 3.3.0 with TXT’. Copy the latest sinit.bin file into /boot directory.
Note
: If the unit hangs after you boot into Tboot at the boot menu, check if you have any USB devices
plugged in to your unit. Also disable USB Legacy Support in your BIOS settings (under F10: System
Configuration
Æ
Device Configurations
Æ
USB legacy Support) and try to boot into Tboot again.
TPM TOOLS 1.3.1 Installation
1.
Open the terminal
2.
cd ~/
3.
If required set the proxy options as, export http_proxy=<proxy address>:<port number>
4.
Install wget if not already installed (yum install wget)
5.
wget
6.
Make sure you have ‘automake’, ‘autoconf’, ‘libtool’, ‘gettext’ and ‘trousers’ installed.
7.
tar –xzvf tpm-tools-1.3.1.tar.gz
8.
cd tpm-tools-1.3.1
9.
./configure
10.
make
11.
make install
LCP: Define Platform Owner Policy
Take TPM Ownership:
1.
Open the terminal
2.
sudo –s
3.
ldconfig (in case of FC8 you may have to try ‘/sbin/ldconfig’)