canonical / canonical/secboot

preinstall: ErrKindTPMDeviceLockoutLocked out should be associated with ActionReboot in some circumstances

Open
#459 0 comments 0 reactions 0 assignees View on GitHub
preinstall-checks
Dominant language
Go
Stars
23
Forks
29
Avg merge
2d 8h
Merged PRs (30d)
2

Description

If `ErrKindTPMDeviceLockoutLocked` is returned because the lockout hierarchy is unavailable and the value of `lockoutRecovery` (read via the `TPM_PT_LOCKOUT_RECOVERY` property is 0, then the lockout hierarchy will become available on the next `TPM2_Startup`. In this case, this error should be associated with `ActionReboot`.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.