From a2f4b4eb3461f57b6c984dfbaa8172d7e753e64b Mon Sep 17 00:00:00 2001 From: Shrikant Temburwar Date: Fri, 22 Mar 2024 10:04:23 +0530 Subject: [PATCH] Add a note on TPM persistent storage index usages Signed-off-by: Shrikant Temburwar --- docs/tpm.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/docs/tpm.md b/docs/tpm.md index 243002af..99a58876 100644 --- a/docs/tpm.md +++ b/docs/tpm.md @@ -394,11 +394,13 @@ sudo ./utils/clear_tpm_nv.sh - Persistent Storage Index in TPM* -Find a persistent storage index that is unused in the TPM* and note it down. It usually starts from 0x81000000. To see the indexes that are already being used, use the following command. FDO uses the 0x81020002 index for the following command examples. +Find a persistent storage index that is unused in the TPM* and note it down. It usually starts from 0x81000000. To see the indexes that are already being used, use the following command. FDO uses the indexes mentioned in the [TPM spec](https://fidoalliance.org/specs/FDO/securing-fdo-in-tpm-v1.0-rd-20231010/securing-fdo-in-tpm-v1.0-rd-20231010.html#Handles_LABEL) for the following command examples. ```shell sudo tpm2_getcap handles-persistent +sudo tpm2_getcap handles-nv-index ``` +> ***NOTE***: Please note that the [FIDO Alliance specification "Securing FDO Credentials in the TPM"](https://fidoalliance.org/specs/FDO/securing-fdo-in-tpm-v1.0-rd-20231010/securing-fdo-in-tpm-v1.0-rd-20231010.html) has been published as a Review Draft by the FIDO Alliance, and is still subject to comment and change. With respect to [section 4.2, Handles for FDO Credentials](https://fidoalliance.org/specs/FDO/securing-fdo-in-tpm-v1.0-rd-20231010/securing-fdo-in-tpm-v1.0-rd-20231010.html#Handles_LABEL), Trusted Computing Group (TCG) has allocated the NVRAM addresses referenced, and is moving towards approval of the persistent object handles. - Primary Key Generation from Endorsement Hierarchy