Hi Mimi, > > > The kernel does not expose the crypto agile TPM 2.0 PCR banks to > > > userspace like it exposes PCRs for TPM 1.2. As a result, a userspace > > > application is required to read PCRs. > > OT: anyone aware why TPM 2.0 does not expose PCR banks to userspace via sysfs? > TPM 2.0 support is slowly being upstreamed in stages. Initially the > TPM 2.0 event log was not exported. Assuming that support for > exposing the TPM 2.0 PCRs is upstreamed, it doesn't necessarily > guarantee that it will be backported to stable. Thanks for info. I'm glad it's being addressed :). IMHO it'd be backporting it (once upstreamed), let's see. > > Did I get it right, that in the end we don't use libibmtss, but tsspcrread. > > So wouldn't be safer to detect it with AC_CHECK_PROGS macro? > > See proposed diff. > Yes, thank you! I've included it in the next version. You're welcome. > thanks! > Mimi Kind regards, Petr