On Thu, May 10, 2018 at 09:41:53AM -0500, David R. Bild wrote: > 3) Allow the driver to register the TPM with TPM driver, but not yet > expose the TPM to userspace. Let the driver do some additional work > (like set the platform hierarchy password) and then explicitly inform > the TPM driver that it is safe to expose the TPM to userspace. This > would be my preferred approach. We already have this. The driver can setup enough to use the TPM framework to send commands before completing registration. We use it in startup timeouts and other flows today. Jason
