Re: [Qemu-devel] investigating TPM for OVMF-on-QEMU

2017-07-17 Thread Javier Martinez Canillas
Hello Laszlo, Thanks a lot for the great summary. On 07/14/2017 08:04 PM, Laszlo Ersek wrote: [snip] > > Here I should mention some ACPI and hardware aspects. Under TPM1 > (whose ACPI table was called "TCPA"), the TPM events (measurements > I think) were logged in a reserved mem

Re: [Qemu-devel] investigating TPM for OVMF-on-QEMU

2017-07-16 Thread Yao, Jiewen
Hi Laszlo This is a good summary. One minor comment is: 1) Tcg2Pei/Dxe are arechitecture driver. We do not expect a platform modify them. 2) Tcg2ConfigPei/Dxe are platform sample driver. A platform may have its own version based upon platform requirement. For example, if a platform supports fTP

Re: [Qemu-devel] investigating TPM for OVMF-on-QEMU

2017-07-14 Thread Peter Jones
On Fri, Jul 14, 2017 at 08:04:14PM +0200, Laszlo Ersek wrote: > - TPM2 is basically the standardized version of TrEE, the most > recent set of specs, and what we should focus on. 100% agreed. > (2) Drivers (and features) in edk2/SecurityPkg/Tcg. > > There are 19 modules under Secu

[Qemu-devel] investigating TPM for OVMF-on-QEMU

2017-07-14 Thread Laszlo Ersek
Hi, I spent most of today reading TPM related material (specs, guides and source code), and below I'd like to describe what I think should be our initial attack on enabling TPM on QEMU/OVMF. (1) Versions of UEFI abstractions regarding TPM (very roughly speaking): There have been three sets o