On Wed, 2020-01-15 at 18:36 -0800, Christopher Clark wrote:
> Hello
>
> I am trying to boot with tboot and TPM 2.0 on a Dell PowerEdge R730
> and encountering reboot at SENTER every time with the following:
>
> TBOOT: TXT.ERRORCODE: 0xc0033451
> TBOOT: AC module error : acm_type=0x1, progress=0x05, error=0xd
>
> which SINIT_Errors-Broadwell-4th-gen.pdf indicates is: Invalid PMR
> configuration
> I am having difficulty determining how the PMR values could be incorrect
> and so fail the SINIT validation, what values would be accepted, whether
> something critical is outside the ranges, or unwanted within them, or indeed
> if
> something else is incorrect.
>
> Can TXT + TPM 2.0 + tboot boot on this system?
> Is there some prior TPM configuration (beyond clearing it) necessary
> to enable boot?
>
> Advice appreciated, and system details are below.
> thanks,
>
> Christopher
>
Hi Christopher
At first point please ensure that you are using latest SINIT, I know
that ACM team was working on similar issue, but I don't know if they
have already released version with the fix.
If problem still exists with latest SINIT, you can try to modify TBOOT
and check if that helps. Please apply following patch over v1.9.11
diff -r 003178d05f52 tboot/txt/txt.c
--- a/tboot/txt/txt.c Tue Jan 14 11:54:11 2020 +0100
+++ b/tboot/txt/txt.c Tue Jan 21 09:27:51 2020 +0100
@@ -559,6 +559,12 @@
if (!vtd_disable_dma_remap(iter)) {
printk(" vtd_disable_dma_remap failed!\n");
}
+ if (!vtd_disable_qie(iter)) {
+ printk(" vtd_disable_qie failed!\n");
+ }
+ if (!vtd_disable_ire(iter)) {
+ printk(" vtd_disable_ire failed!\n");
+ }
}
}
Thanks,
Lukasz
_______________________________________________
tboot-devel mailing list
tboot-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/tboot-devel
