Post Ai5c6OTsPyapeP0pai by noodles@social.earth.li
(DIR) More posts by noodles@social.earth.li
(DIR) Post #Ai5c6OTsPyapeP0pai by noodles@social.earth.li
2024-04-29T10:55:54.896277Z
0 likes, 0 repeats
I don't suppose anyone is aware of a generic-ish TPM/UEFI validation suite? Something you could run and go "Yeah, looks like the firmware vendor is doing mostly the right things"? I guess at least making sure the TPM is ready for OS use, validating that the event log has details that allow set PCRs to be validated, possibly ensuring appropriate PCRs actually have values?
(DIR) Post #Ai5c6PnlVW61kNKEEK by vorlon@mastodon.social
2024-04-29T15:58:02Z
0 likes, 0 repeats
@noodles a good starting point will be fwts, the firmware test suite. I don't know if it has anything for TPM currently.
(DIR) Post #Ai5c6R0D2je1TG9gGW by noodles@social.earth.li
2024-04-29T16:03:50.135238Z
0 likes, 0 repeats
@vorlon Oh, neat. It does seem to have _something_ TPM related already.