211 lines · plain
1What: /sys/class/tpm/tpmX/device/2Date: April 20053KernelVersion: 2.6.124Contact: linux-integrity@vger.kernel.org5Description: The device/ directory under a specific TPM instance exposes6 the properties of that TPM chip7 8 9What: /sys/class/tpm/tpmX/device/active10Date: April 200611KernelVersion: 2.6.1712Contact: linux-integrity@vger.kernel.org13Description: The "active" property prints a '1' if the TPM chip is accepting14 commands. An inactive TPM chip still contains all the state of15 an active chip (Storage Root Key, NVRAM, etc), and can be16 visible to the OS, but will only accept a restricted set of17 commands. See the TPM Main Specification part 2, Structures,18 section 17 for more information on which commands are19 available.20 21What: /sys/class/tpm/tpmX/device/cancel22Date: June 200523KernelVersion: 2.6.1324Contact: linux-integrity@vger.kernel.org25Description: The "cancel" property allows you to cancel the currently26 pending TPM command. Writing any value to cancel will call the27 TPM vendor specific cancel operation.28 29What: /sys/class/tpm/tpmX/device/caps30Date: April 200531KernelVersion: 2.6.1232Contact: linux-integrity@vger.kernel.org33Description: The "caps" property contains TPM manufacturer and version info.34 35 Example output::36 37 Manufacturer: 0x53544d2038 TCG version: 1.239 Firmware version: 8.1640 41 Manufacturer is a hex dump of the 4 byte manufacturer info42 space in a TPM. TCG version shows the TCG TPM spec level that43 the chip supports. Firmware version is that of the chip and44 is manufacturer specific.45 46What: /sys/class/tpm/tpmX/device/durations47Date: March 201148KernelVersion: 3.149Contact: linux-integrity@vger.kernel.org50Description: The "durations" property shows the 3 vendor-specific values51 used to wait for a short, medium and long TPM command. All52 TPM commands are categorized as short, medium or long in53 execution time, so that the driver doesn't have to wait54 any longer than necessary before starting to poll for a55 result.56 57 Example output::58 59 3015000 4508000 180995000 [original]60 61 Here the short, medium and long durations are displayed in62 usecs. "[original]" indicates that the values are displayed63 unmodified from when they were queried from the chip.64 Durations can be modified in the case where a buggy chip65 reports them in msec instead of usec and they need to be66 scaled to be displayed in usecs. In this case "[adjusted]"67 will be displayed in place of "[original]".68 69What: /sys/class/tpm/tpmX/device/enabled70Date: April 200671KernelVersion: 2.6.1772Contact: linux-integrity@vger.kernel.org73Description: The "enabled" property prints a '1' if the TPM chip is enabled,74 meaning that it should be visible to the OS. This property75 may be visible but produce a '0' after some operation that76 disables the TPM.77 78What: /sys/class/tpm/tpmX/device/owned79Date: April 200680KernelVersion: 2.6.1781Contact: linux-integrity@vger.kernel.org82Description: The "owned" property produces a '1' if the TPM_TakeOwnership83 ordinal has been executed successfully in the chip. A '0'84 indicates that ownership hasn't been taken.85 86What: /sys/class/tpm/tpmX/device/pcrs87Date: April 200588KernelVersion: 2.6.1289Contact: linux-integrity@vger.kernel.org90Description: The "pcrs" property will dump the current value of all Platform91 Configuration Registers in the TPM. Note that since these92 values may be constantly changing, the output is only valid93 for a snapshot in time.94 95 Example output::96 97 PCR-00: 3A 3F 78 0F 11 A4 B4 99 69 FC AA 80 CD 6E 39 57 C3 3B 22 7598 PCR-01: 3A 3F 78 0F 11 A4 B4 99 69 FC AA 80 CD 6E 39 57 C3 3B 22 7599 PCR-02: 3A 3F 78 0F 11 A4 B4 99 69 FC AA 80 CD 6E 39 57 C3 3B 22 75100 PCR-03: 3A 3F 78 0F 11 A4 B4 99 69 FC AA 80 CD 6E 39 57 C3 3B 22 75101 PCR-04: 3A 3F 78 0F 11 A4 B4 99 69 FC AA 80 CD 6E 39 57 C3 3B 22 75102 ...103 104 The number of PCRs and hex bytes needed to represent a PCR105 value will vary depending on TPM chip version. For TPM 1.1 and106 1.2 chips, PCRs represent SHA-1 hashes, which are 20 bytes107 long. Use the "caps" property to determine TPM version.108 109What: /sys/class/tpm/tpmX/device/pubek110Date: April 2005111KernelVersion: 2.6.12112Contact: linux-integrity@vger.kernel.org113Description: The "pubek" property will return the TPM's public endorsement114 key if possible. If the TPM has had ownership established and115 is version 1.2, the pubek will not be available without the116 owner's authorization. Since the TPM driver doesn't store any117 secrets, it can't authorize its own request for the pubek,118 making it unaccessible. The public endorsement key is gener-119 ated at TPM manufacture time and exists for the life of the120 chip.121 122 Example output::123 124 Algorithm: 00 00 00 01125 Encscheme: 00 03126 Sigscheme: 00 01127 Parameters: 00 00 08 00 00 00 00 02 00 00 00 00128 Modulus length: 256129 Modulus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ossible values::148 149 Algorithm: TPM_ALG_RSA (1)150 Encscheme: TPM_ES_RSAESPKCSv15 (2)151 TPM_ES_RSAESOAEP_SHA1_MGF1 (3)152 Sigscheme: TPM_SS_NONE (1)153 Parameters, a byte string of 3 u32 values:154 Key Length (bits): 00 00 08 00 (2048)155 Num primes: 00 00 00 02 (2)156 Exponent Size: 00 00 00 00 (0 means the157 default exp)158 Modulus Length: 256 (bytes)159 Modulus: The 256 byte Endorsement Key modulus160 161What: /sys/class/tpm/tpmX/device/temp_deactivated162Date: April 2006163KernelVersion: 2.6.17164Contact: linux-integrity@vger.kernel.org165Description: The "temp_deactivated" property returns a '1' if the chip has166 been temporarily deactivated, usually until the next power167 cycle. Whether a warm boot (reboot) will clear a TPM chip168 from a temp_deactivated state is platform specific.169 170What: /sys/class/tpm/tpmX/device/timeouts171Date: March 2011172KernelVersion: 3.1173Contact: linux-integrity@vger.kernel.org174Description: The "timeouts" property shows the 4 vendor-specific values175 for the TPM's interface spec timeouts. The use of these176 timeouts is defined by the TPM interface spec that the chip177 conforms to.178 179 Example output::180 181 750000 750000 750000 750000 [original]182 183 The four timeout values are shown in usecs, with a trailing184 "[original]" or "[adjusted]" depending on whether the values185 were scaled by the driver to be reported in usec from msecs.186 187What: /sys/class/tpm/tpmX/tpm_version_major188Date: October 2019189KernelVersion: 5.5190Contact: linux-integrity@vger.kernel.org191Description: The "tpm_version_major" property shows the TCG spec major version192 implemented by the TPM device.193 194 Example output::195 196 2197 198What: /sys/class/tpm/tpmX/pcr-<H>/<N>199Date: March 2021200KernelVersion: 5.12201Contact: linux-integrity@vger.kernel.org202Description: produces output in compact hex representation for PCR203 number N from hash bank H. N is the numeric value of204 the PCR number and H is the crypto string205 representation of the hash206 207 Example output::208 209 cat /sys/class/tpm/tpm0/pcr-sha256/7210 2ED93F199692DC6788EFA6A1FE74514AB9760B2A6CEEAEF6C808C13E4ABB0D42211