Hi all, On Sun, 2018-12-16 at 14:32 +0100, Michael Niewöhner wrote: > Hi again, > > after my UEFI firmware mod/hack to flash the newest available Nuvoton firmware > to the NCPT650 the selftest error went away. Since then the TPM worked without > any further problems, at least after warm reboots. > > What I didn't notice before is that it does NOT work after a cold (re)boot. > There is no difference between Intel Firmware TPM and the Nuvoton TPM. > I can reproduce the error for both. I did not test TPM1.2 again. > > dmesg warm (re)boot: > -------------------- > > dmesg | grep -i tpm > > [ 0.000000] efi: ACPI > 2.0=0x9e07e000 ACPI=0x9e07e000 SMBIOS=0x9ebeb000 SMBIOS > 3.0=0x9ebea000 MEMATTR=0x98fb2018 TPMEventLog=0x972bc018 > [ 0.003368] ACPI: TPM2 0x000000009E0B7F70 000034 (v03 LENOVO TC- > S06 00001260 AMI 00000000) > [ 3.610138] tpm_tis MSFT0101:00: 2.0 TPM (device-id 0xFE, rev-id 2) > > > dmesg cold boot with tpm_tis.interrupts=0 tpm_tis.force=1: > ---------------------------------------------------------- > > dmesg | grep -i tpm > > [ 0.000000] Command line: initrd=\initrd-test console=ttyS0,115200n8 > break=premount tpm_tis.interrupts=0 tpm_tis.force=1 > [ 0.000000] efi: ACPI > 2.0=0x9e07e000 ACPI=0x9e07e000 SMBIOS=0x9ebeb000 SMBIOS > 3.0=0x9ebea000 MEMATTR=0x98fb2018 TPMEventLog=0x972bb018 > [ 0.003531] ACPI: TPM2 0x000000009E0B7F70 000034 (v03 LENOVO TC- > S06 00001260 AMI 00000000) > [ 0.162005] Kernel command line: initrd=\initrd-test console=ttyS0,115200n8 > break=premount tpm_tis.interrupts=0 tpm_tis.force=1 > [ 3.616806] tpm_tis MSFT0101:00: 2.0 TPM (device-id 0xFE, rev-id 2) > [ 3.683117] tpm_tis tpm_tis: can't request region for resource [mem > 0xfed40000-0xfed44fff] > [ 3.691378] tpm_tis: probe of tpm_tis failed with error -16 > [ 4.572539] ima: Error Communicating to TPM chip > > > dmesg cold boot: > ---------------- > > dmesg | grep -i tpm > > [ 0.000000] Command line: initrd=\initrd-test console=ttyS0,115200n8 > break=premount > [ 0.000000] efi: ACPI > 2.0=0x9e07e000 ACPI=0x9e07e000 SMBIOS=0x9ebeb000 SMBIOS > 3.0=0x9ebea000 MEMATTR=0x98fb2298 TPMEventLog=0x972bb018 > [ 0.003559] ACPI: TPM2 0x000000009E0B7F70 000034 (v03 LENOVO TC- > S06 00001260 AMI 00000000) > [ 0.161958] Kernel command line: initrd=\initrd-test console=ttyS0,115200n8 > break=premount > [ 5.245801] ima: No TPM chip found, activating TPM-bypass! > > > Any ideas how to debug this? > > Thanks > Michael I have been doing some more debugging - as far as I were able to. These are my results: Doing a cold boot I was getting "No TPM chip found" in most cases. I found out that the TPM will not be found if the bootloader (systemd-boot in my case) has a timeout value of 10 seconds. This was set for some other tests... When I remove the timeout and boot directly to the linux kernel, I get that "2314 TPM-self test error" since it has not finished, yet. The TPM is detected by IMA and works fine then. Some more tests showed that any delay before booting the kernel causes the TPM to not get detected. I tested, 10, 15, 20, 30, 60... seconds. Only in some very rare cases the TPM got detected. I wanted to know if the TPM is in an well initialized state at the time of that error. Since I was not able to get some test/debug kernel patches working I decided to try kexec. It turned out that the TPM is indeed correctly working and will be detected just fine by linux after kexec! Is there anyone having an idea what could be wrong here? I am willing to debug this but I have really no idea where to start :-( Best regards Michael ---- kexec test output: <...> (initramfs) dmesg | grep -i tpm [ 0.000000] Command line: initrd=\initrd console=ttyS0,115200n8 root=zfs:rpool/ROOT tpm.override_rng_quality=1024 quiet break=top [ 0.000000] efi: ACPI 2.0=0x9ea7e000 ACPI=0x9ea7e000 SMBIOS=0x9f5eb000 SMBIOS 3.0=0x9f5ea000 MPS=0xfca00 ESRT=0x9c07b118 MEMATTR=0x9982d018 TPMEventLog=0x 98ace018 [ 0.001310] ACPI: TPM2 0x000000009EAB7F70 000034 (v03 LENOVO TC- S06 00001260 AMI 00000000) [ 0.159568] Kernel command line: initrd=\initrd console=ttyS0,115200n8 root=zfs:rpool/ROOT quiet break=top [ 1.376200] ima: No TPM chip found, activating TPM-bypass! / # kexec -f --initrd=/initrd.img-4.19.9\+ --reuse-cmdline /vmlinuz-4.19.9\+ [ 890.632541] kexec_core: Starting new kernel <...> (initramfs) dmesg | grep -i tpm [ 0.000000] Command line: initrd=\initrd console=ttyS0,115200n8 root=zfs:rpool/ROOT tpm.override_rng_quality=1024 quiet break=top [ 0.000000] efi: ACPI 2.0=0x9ea7e000 ACPI=0x9ea7e000 SMBIOS=0x9f5eb000 SMBIOS 3.0=0x9f5ea000 MPS=0xfca00 ESRT=0x9c07b118 MEMATTR=0x9982d018 TPMEventLog=0x 98ace018 [ 0.001272] ACPI: TPM2 0x000000009EAB7F70 000034 (v03 LENOVO TC- S06 00001260 AMI 00000000) [ 0.168244] Kernel command line: initrd=\initrd console=ttyS0,115200n8 root=zfs:rpool/ROOT quiet break=top [ 0.632922] tpm_tis MSFT0101:00: 2.0 TPM (device-id 0xFE, rev-id 2)
