diff options
| author | nagendra modadugu <ngm@google.com> | 2016-07-21 19:36:28 -0700 |
|---|---|---|
| committer | Vadim Bendebury <vbendeb@chromium.org> | 2016-07-23 02:18:49 +0000 |
| commit | e819881b8c191603b7861cb98ebbbf5e6172da5a (patch) | |
| tree | 7dfd3734687611b8698900e29c488f8c0858bc87 /common | |
| parent | c44ee5f93d354f38dfacec6bd63b5d40392a7e55 (diff) | |
| download | chrome-ec-e819881b8c191603b7861cb98ebbbf5e6172da5a.tar.gz | |
CR50: add endorsement certificate flow
This change implements logic for installing
endorsement certificates in the RW section.
The endorsement certificates are initially
provisioned in a fixed RO flash region and
are copied in the RW TPM data region (once
this region has been initialized).
Also add code for reading from the info bank,
which is where the endorsement seed is
initially stored.
BRANCH=none
BUG=chrome-os-partner:43025,chrome-os-partner:47524
BUG=chrome-os-partner:50115
TEST=TCG tests running
Change-Id: Id8c16d399202eee4ac0c4e397bdd29641ff9d2f3
Signed-off-by: nagendra modadugu <ngm@google.com>
Reviewed-on: https://chromium-review.googlesource.com/362402
Reviewed-by: Vadim Bendebury <vbendeb@chromium.org>
Commit-Queue: Vadim Bendebury <vbendeb@chromium.org>
Tested-by: Vadim Bendebury <vbendeb@chromium.org>
Diffstat (limited to 'common')
| -rw-r--r-- | common/tpm_registers.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/common/tpm_registers.c b/common/tpm_registers.c index 70e57c8d76..29bcf791fa 100644 --- a/common/tpm_registers.c +++ b/common/tpm_registers.c @@ -476,6 +476,7 @@ static void tpm_init(void) */ TPM_Manufacture(1); _TPM_Init(); + tpm_endorse(); } _plat__SetNvAvail(); |