Bug 35574 - Including support for Trusted Platform Modules (TPM) to Gentoo via the IBM drivers and TSS stack.
Bug#: 35574 Product:  Gentoo Linux Version: unspecified Platform: x86
OS/Version: Linux Status: RESOLVED Severity: enhancement Priority: P2
Resolution: FIXED Assigned To: henrik@brixandersen.dk Reported By: gentoobugzilla@digitasaru.net
Component: Hardened
URL:  http://www.research.ibm.com/gsal/tcpa/
Summary: Including support for Trusted Platform Modules (TPM) to Gentoo via the IBM drivers and TSS stack.
Keywords:  
Status Whiteboard: 
Opened: 2003-12-10 23:10 0000
Description:   Opened: 2003-12-10 23:10 0000
Please review the URL listed above and the Linux Journal article, "Take Control
of TCPA" (http://www.linuxjournal.com/article.php?sid=6633).  It provides an
overview of why including support for the TPM is important, addresses
misconceptions regarding it, provides the GPLed/BSD-licensed source code to the
TPM driver (GPL) and preliminary interface library (BSD) to the driver.  The
Linux Journal article provides an overview of the entire system.

This could be a real boon for security, and I'd like to see it included as an
option in Gentoo.  The TPM could be a USE flag, as I believe there are projects
such as grub which include patches or could be patched to take advantage of the
existance of a TPM.


Reproducible: Always
Steps to Reproduce:
1.
2.
3.

------- Comment #1 From solar 2003-12-11 23:04:21 0000 -------
Joseph,

From a quick read/review of the url it sounds like special hardware is 
required. I'm not aware of anybody that has this type of hardware, so
here is the deal.  We cant/wont add anything to portage which can cant
test and verify that it works.
If you can find a way for us to test/verify that this works then it 
will be considered.

------- Comment #2 From Joseph Pingenot 2003-12-12 05:54:03 0000 -------
My new laptop (whenever it gets here) will have such hardware.

I have contacted the vendor of the TPM, and at least the project manager would like to help make it work under Linux.

Thus, I could help test.

------- Comment #3 From solar 2004-01-27 18:00:53 0000 -------
Any new news on this bug Joseph? Gentoo devs still dont have this kinda
hardware.

------- Comment #4 From Joseph Pingenot 2004-01-28 09:35:50 0000 -------
Sorry.  After HP dropping the ball waaaay too many times, I went with a Dell
home system, which has no TPM.  Sorry!

You might contact Infineon to see if they'll help.  I know IBM is working on
it.  They would be glad to get any help you may provide, and you may get
hardware from either or both of them.

Sorry I can't be of help anymore.  HP sucks, I guess.

------- Comment #5 From Kurt Lieber 2004-03-29 07:43:59 0000 -------
updating component.

------- Comment #6 From Henrik Brix Andersen 2004-08-30 08:43:25 0000 -------
I own an IBM ThinkPad X31 which has a TCPA chip. I'd be happy to look into this
more and help testing.

------- Comment #7 From Peter Johanson (RETIRED) 2004-08-30 08:45:54 0000 -------
My T30 (whenever it gets back from being repaired) also has a TPM chip in it.
I've gotten the driver working under 2.6 before with some mild hacking of the
driver (quite a few months ago). I'd also be interested in this work.

------- Comment #8 From Henrik Brix Andersen 2004-08-30 08:50:44 0000 -------
http://www.prosec.rub.de/trusted_grub.html has some information about a TPM
enabled GRUB.

------- Comment #9 From solar 2004-09-08 18:22:30 0000 -------
Well we still lack the hardware to support this. Bouncing back to
bug-wranglers.

------- Comment #10 From Henrik Brix Andersen 2004-09-10 01:39:20 0000 -------
*** Bug 62673 has been marked as a duplicate of this bug. ***

------- Comment #11 From Henrik Brix Andersen 2005-01-18 02:50:12 0000 -------
Created an attachment (id=48822) [details]
app-crypt/tpm-2.0.ebuild

This is an updated ebuild for the IBM TPM driver.

------- Comment #12 From Daniel Black 2005-02-03 03:18:03 0000 -------
added app-crypt/tpm-module and sys-libs/libtpm - Thanks Henrik Brix Andersen
<brix@NOHATEMAIL.gentoo.org>

Drivers added. Recruitment underway.