Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 35574 - Including support for Trusted Platform Modules (TPM) to Gentoo via the IBM drivers and TSS stack.
Summary: Including support for Trusted Platform Modules (TPM) to Gentoo via the IBM dr...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Hardened (show other bugs)
Hardware: x86 Linux
: High enhancement (vote)
Assignee: Henrik Brix Andersen
URL: http://www.research.ibm.com/gsal/tcpa/
Whiteboard:
Keywords:
: 62673 (view as bug list)
Depends on:
Blocks:
 
Reported: 2003-12-10 23:10 UTC by Joseph Pingenot
Modified: 2005-02-03 03:18 UTC (History)
3 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
app-crypt/tpm-2.0.ebuild (tpm-2.0.ebuild,846 bytes, text/plain)
2005-01-18 02:50 UTC, Henrik Brix Andersen
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Joseph Pingenot 2003-12-10 23:10:46 UTC
Please review the URL listed above and the Linux Journal article, "Take Control of TCPA" (http://www.linuxjournal.com/article.php?sid=6633).  It provides an overview of why including support for the TPM is important, addresses misconceptions regarding it, provides the GPLed/BSD-licensed source code to the TPM driver (GPL) and preliminary interface library (BSD) to the driver.  The Linux Journal article provides an overview of the entire system.

This could be a real boon for security, and I'd like to see it included as an option in Gentoo.  The TPM could be a USE flag, as I believe there are projects such as grub which include patches or could be patched to take advantage of the existance of a TPM.


Reproducible: Always
Steps to Reproduce:
1.
2.
3.
Comment 1 solar (RETIRED) gentoo-dev 2003-12-11 23:04:21 UTC
Joseph,

From a quick read/review of the url it sounds like special hardware is 
required. I'm not aware of anybody that has this type of hardware, so
here is the deal.  We cant/wont add anything to portage which can cant
test and verify that it works.
If you can find a way for us to test/verify that this works then it 
will be considered.
Comment 2 Joseph Pingenot 2003-12-12 05:54:03 UTC
My new laptop (whenever it gets here) will have such hardware.

I have contacted the vendor of the TPM, and at least the project manager would like to help make it work under Linux.

Thus, I could help test.
Comment 3 solar (RETIRED) gentoo-dev 2004-01-27 18:00:53 UTC
Any new news on this bug Joseph? Gentoo devs still dont have this kinda hardware.
Comment 4 Joseph Pingenot 2004-01-28 09:35:50 UTC
Sorry.  After HP dropping the ball waaaay too many times, I went with a Dell home system, which has no TPM.  Sorry!

You might contact Infineon to see if they'll help.  I know IBM is working on it.  They would be glad to get any help you may provide, and you may get hardware from either or both of them.

Sorry I can't be of help anymore.  HP sucks, I guess.
Comment 5 Kurt Lieber (RETIRED) gentoo-dev 2004-03-29 07:43:59 UTC
updating component.
Comment 6 Henrik Brix Andersen 2004-08-30 08:43:25 UTC
I own an IBM ThinkPad X31 which has a TCPA chip. I'd be happy to look into this more and help testing.
Comment 7 Peter Johanson (RETIRED) gentoo-dev 2004-08-30 08:45:54 UTC
My T30 (whenever it gets back from being repaired) also has a TPM chip in it. I've gotten the driver working under 2.6 before with some mild hacking of the driver (quite a few months ago). I'd also be interested in this work.
Comment 8 Henrik Brix Andersen 2004-08-30 08:50:44 UTC
http://www.prosec.rub.de/trusted_grub.html has some information about a TPM enabled GRUB.
Comment 9 solar (RETIRED) gentoo-dev 2004-09-08 18:22:30 UTC
Well we still lack the hardware to support this. Bouncing back to bug-wranglers.
Comment 10 Henrik Brix Andersen 2004-09-10 01:39:20 UTC
*** Bug 62673 has been marked as a duplicate of this bug. ***
Comment 11 Henrik Brix Andersen 2005-01-18 02:50:12 UTC
Created attachment 48822 [details]
app-crypt/tpm-2.0.ebuild

This is an updated ebuild for the IBM TPM driver.
Comment 12 Daniel Black (RETIRED) gentoo-dev 2005-02-03 03:18:03 UTC
added app-crypt/tpm-module and sys-libs/libtpm - Thanks Henrik Brix Andersen <brix@NOHATEMAIL.gentoo.org>

Drivers added. Recruitment underway.