canonical / canonical/secboot

Cannot check TPM discreteness using Intel BootGuard status: no TPM2 device is available

Open
#455 11 comments 4 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
23
Forks
29
Avg merge
2d 8h
Merged PRs (30d)
2

Description

Testing with _ubuntu-25.10-snapshot3-desktop-amd64.iso_ gives me:

Image

`sudo mokutil --sb-state [ -d /sys/firmware/efi ] && echo "UEFI" || echo "BIOS"`
`SecureBoot enabled`
`UEFI`

`sudo tpm2_getcap properties-fixed`
`TPM2_PT_FAMILY_INDICATOR:
raw: 0x322E3000
value: "2.0"
TPM2_PT_LEVEL:
raw: 0
TPM2_PT_REVISION:
raw: 0x8A
value: 1.38
TPM2_PT_DAY_OF_YEAR:
raw: 0x12F
TPM2_PT_YEAR:
raw: 0x7E3
TPM2_PT_MANUFACTURER:
raw: 0x4E544300
value: "NTC"
TPM2_PT_VENDOR_STRING_1:
raw: 0x4E504354
value: "NPCT"
TPM2_PT_VENDOR_STRING_2:
raw: 0x37357800
value: "75x"
TPM2_PT_VENDOR_STRING_3:
raw: 0x22212134
value: ""!!4"
TPM2_PT_VENDOR_STRING_4:
raw: 0x726C7300
value: "rls"
TPM2_PT_VENDOR_TPM_TYPE:
raw: 0x0
TPM2_PT_FIRMWARE_VERSION_1:
raw: 0x70002
TPM2_PT_FIRMWARE_VERSION_2:
raw: 0x20000
TPM2_PT_INPUT_BUFFER:
raw: 0x400
TPM2_PT_HR_TRANSIENT_MIN:
raw: 0x5
TPM2_PT_HR_PERSISTENT_MIN:
raw: 0x7
TPM2_PT_HR_LOADED_MIN:
raw: 0x5
TPM2_PT_ACTIVE_SESSIONS_MAX:
raw: 0x40
TPM2_PT_PCR_COUNT:
raw: 0x18
TPM2_PT_PCR_SELECT_MIN:
raw: 0x3
TPM2_PT_CONTEXT_GAP_MAX:
raw: 0xFF
TPM2_PT_NV_COUNTERS_MAX:
raw: 0x0
TPM2_PT_NV_INDEX_MAX:
raw: 0x800
TPM2_PT_MEMORY:
raw: 0x6
TPM2_PT_CLOCK_UPDATE:
raw: 0x400000
TPM2_PT_CONTEXT_HASH:
raw: 0xC
TPM2_PT_CONTEXT_SYM:
raw: 0x6
TPM2_PT_CONTEXT_SYM_SIZE:
raw: 0x100
TPM2_PT_ORDERLY_COUNT:
raw: 0xFF
TPM2_PT_MAX_COMMAND_SIZE:
raw: 0x800
TPM2_PT_MAX_RESPONSE_SIZE:
raw: 0x800
TPM2_PT_MAX_DIGEST:
raw: 0x30
TPM2_PT_MAX_OBJECT_CONTEXT:
raw: 0x714
TPM2_PT_MAX_SESSION_CONTEXT:
raw: 0x148
TPM2_PT_PS_FAMILY_INDICATOR:
raw: 0x1
TPM2_PT_PS_LEVEL:
raw: 0x0
TPM2_PT_PS_REVISION:
raw: 0x104
TPM2_PT_PS_DAY_OF_YEAR:
raw: 0x0
TPM2_PT_PS_YEAR:
raw: 0x0
TPM2_PT_SPLIT_MAX:
raw: 0x80
TPM2_PT_TOTAL_COMMANDS:
raw: 0x71
TPM2_PT_LIBRARY_COMMANDS:
raw: 0x68
TPM2_PT_VENDOR_COMMANDS:
raw: 0x9
TPM2_PT_NV_BUFFER_MAX:
raw: 0x400
TPM2_PT_MODES:
raw: 0x1
value: TPMA_MODES_FIPS_140_2
`

Might be related to https://github.com/canonical/secboot/issues/327

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.