I found a new ID created with SLES 11 SP4 called tss. Apparently this is part
of the trousers package which SP4 installed. Release notes below..
Do we have TPM chips on z??
----------------------------------------------------------------
6.4.7 Enablement for TPM/Trusted Computing #
SUSE Linux Enterprise Server 11 comes with support for Trusted Computing
technology. To enable your system's TPM chip, make sure that the "security
chip" option in your BIOS is selected. TPM support is entirely passive, meaning
that measurements are being performed, but no action is taken based on any
TPM-related activity. TPM chips manufactured by Infineon, NSC and Atmel are
supported, in addition to the virtual TPM device for Xen.
The corresponding kernel drivers are not loaded automatically. To do so, enter:
find /lib/modules -type f -name "tpm*.ko"
and load the kernel modules for your system manually or via
MODULES_LOADED_ON_BOOT in /etc/sysconfig/kernel.
If your TPM chip with taken ownership is configured in Linux and available for
use, you may read PCRs from /sys/devices/*/*/pcrs.
The tpm-tools package contains utilities to administer your TPM chip, and the
trousers package provides tcsd-the daemon that allows userland programs to
communicate with the TPM driver in the Linux kernel. tcsd can be enabled as a
service for the runlevels of your choice.
To implement a trusted ("measured") boot path, use the package trustedgrub
instead of the grub package as your bootloader. The trustedgrub bootloader does
not display any graphical representation of a boot menu for informational
reasons.
Marcy
This message may contain confidential and/or privileged information. If you are
not the addressee or authorized to receive this for the addressee, you must not
use, copy, disclose, or take any action based on this message or any
information herein. If you have received this message in error, please advise
the sender immediately by reply e-mail and delete this message. Thank you for
your cooperation.
----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
----------------------------------------------------------------------
For more information on Linux on System z, visit
http://wiki.linuxvm.org/
