dasharo-issues
dasharo-issues copied to clipboard
Dasharo
TpmReady is False on Windows - VP2420, v1.2.0
Device
VP2420
Dasharo version
v1.2.0
Affected component(s) or functionality
TPM support
Brief summary
On Windows 11, get-tpm returns that TpmPresent and TpmEnabled are True, but TpmReady is false
How reproducible
100%
How to reproduce
call get-tpm on Windows 11 on VP2420 and observe that TpmReady is False
Expected behavior
TpmReady should be True
Actual behavior
TpmReady is False
Screenshots
No response
Additional context
No response
Solutions you've tried
No response
https://learn.microsoft.com/en-us/powershell/module/trustedplatformmodule/initialize-tpm?view=windowsserver2022-ps
Maybe the TPm was not initialized by WIndows? TpmReady is rather some flag from BitLocker or stuff like that. It doesn't;t mean TPM is not working...
@miczyg1 @mkopec Do you have specific suggestion then how this test should be modified: https://github.com/Dasharo/open-source-firmware-validation/blob/main/dasharo-security/tpm-support.robot#L63 ?
Pretty dumb but may work : https://www.youtube.com/watch?v=Rqx55O-4AcQ
(one of the first search results)
As you say, it is more related on setting up TPM for BitLocker.
Perhaps in this test we should just test for the TpmPresent field.
In Linux equivalent test, we also read PCR values, but it seems there is no easy way on Windows to do that.
@filipleple There were no problems with Windows installation due to the TPM, just this TPmReady was False, correct?
@macpijan Yeah, installation and testing on Windows went well besides that