Re: [tboot-devel] "Invalid RSDP" TXT Error

2017-05-25 Thread Marco Vanotti
Hi All, I still couldn't fix the issue. However, there was a problem with the policies I used (the ones I created myself). I created another policy, with the lcp-gen2 tools and tried them in another machine with the same MLE. I was able to get a successful boot in the other machine, but not in th

Re: [tboot-devel] Questions about Launch Control Policies

2017-05-25 Thread Marco Vanotti
Hi Ning, Thank you for your answer. 1) I can't read the index, I believe it's because of the attributes (I would need owner_read flag) I'm doing: # tpm2_nvread -x 0x141 -a 0x4001 -s 10 Failed to read NVRAM area at index 0x141 (20971521).Error:0x149 # tpm2_rc_decode 0x149 error layer

Re: [tboot-devel] Questions about Launch Control Policies

2017-05-25 Thread Sun, Ning
For question1: PO NV Index attribute definition is correct, did you see this issue when reading from the index? What was the platform and SINIT ACM used in finding this issue? For question2: this is correct by design, OsSinitData_Capabilities bit in PolicyControl works only with TPM1.2 and lega