Re: Fwd: PROBLEM: tpm_cpg can't request region with AMD/Dell fTPM

2018-08-11 Thread Harlan Lieberman-Berg
On Sat, Aug 11, 2018 at 5:42 AM, Tomas Winkler  wrote:
> What platform is this? This is not regular 0xfed4 address space. I
> guess this is BYT or CHT.  It's better to get dmideoce dump as well.

Hello Tomas, Jarkko, all,

I'm not sure what's up with that.  I've updated the firmware to the
latest version (with no fix, sadly), and re-dumped the ACPI tables.
They now process correctly through isl v20180629.  I've also saved the
output of dmidecode for you.

https://gist.github.com/hlieberman-gov/83fa708d41051bafccc553cf0147db4f

Sincerely,
-- 
Harlan Lieberman-Berg
Defense Digital Service


nvs.c: Inappropriately maps TPM space on Dell Inspiron 11 3000

2018-08-22 Thread Harlan Lieberman-Berg
Hello maintainers,

Crossing over from a thread in linux-integrity
(),
the fTPM on the Dell Inspiron 11 3000 reports its TPM registers inside
ACPI NV space.  This causes the TPM to fail to run as the address
space has already been mapped by acpi/nvs.c prior to the TPM driver
loading.

In discussion with Jarkko and mjg, as well as contacts with the
manufacturer, this appears to something that Linux should support,
despite being arguably broken.  Because the fTPM is part of the ODM
BIOS, this isn't something that can realistically be fixed through
firmware updates; it's going to be scattered across many different
devices and many different manufacturers -- and because Windows
already works around this particular brain-damage, there's not as much
leverage that can be applied.

The full ACPI dump and the output of dmidecode can be found at
https://gist.github.com/hlieberman-gov/83fa708d41051bafccc553cf0147db4f.
I have machines that are set-aside for testing, running both Windows
10 and Debian sid, and I'm happy to help test possible fixes.

Sincerely,
-- 
Harlan Lieberman-Berg
Defense Digital Service


Re: Fwd: PROBLEM: tpm_cpg can't request region with AMD/Dell fTPM

2018-08-15 Thread Harlan Lieberman-Berg
Hello all,

Just wanted to give you a quick update now that I got my hands on an
OEM Windows version of the same machine.  I can confirm that Windows
is able to use the TPM to some extent; confirmation and some of the
output of some of the TPM Powershell cmdlets is at
https://gist.github.com/hlieberman-gov/915fda005e3297570e9e6e68e1708bc6

Sincerely,

-- 
Harlan Lieberman-Berg
Defense Digital Service