Tboot

The printable version is no longer supported and may have rendering errors. Please update your browser bookmarks and please use the default browser print function instead.

Introduction

Trusted Boot is a technique...

Prerequisites

   yum install tboot openssl trousers kernel-modules-extra

Installation

The following will provide a trusted boot setup with checksums on the initramd and kernel.

Take ownership of the TPM

   tpm_takeownership -z

Ensure Proper SINIT ACM

See http://software.intel.com/en-us/articles/intel-trusted-execution-technology

Some hardware platforms include the SINIT ACM in BIOS. Most do not. You may download all of the ACM modules into /boot and list them all as modules in your grub.conf. tboot will pick the right module for your platform.

Create VLP

In order to create a VLP we need the path to the initial ram disk and kernel, as well as the kernel line in grub.conf.

Create a new verified launch policy.

   tb_polgen --create --type nonfatal vl.pol

Add the kernel hash / grub command to our VLP

   tb_polgen --add --num 0 --pcr 18 --hash image --cmdline "$grub_cmdline" --image $kernel_file vl.pol

Add the initramd to VLP

   tb_polgen --add --num 1 --pcr 19 --hash image --cmdline "" --image $initramd_file vl.pol

Hash tboot.gz

   lcp_mlehash -c "logging=vga,serial,memory" /boot/tboot.gz > mle_hash

   lcp_crtpolelt --create --type mle --ctrl 0x00 --minver 17 --out mle.elt mle_hash

Find your system's pcr values. They may alternatively be in /sys/bus/pnp/devices/00:0a/pcrs

   cat /sys/devices/platform/tpm_tis/pcrs | grep -e PCR-00 -e PCR-01 > pcrs

Create the Launch Policy

   lcp_crtpolelt --create --type pconf --out pconf.elt pcrs

Note: the following command uses a default uuid. You may want to replace tboot with your systems uuid.

   lcp_crtpolelt --create --type custom --out custom.elt --uuid tboot vl.pol

   lcp_crtpollist --create --out list_unsig.lst mle.elt pconf.elt

   openssl genrsa -out privkey.pem 2048

   openssl rsa -pubout -in privkey.pem -out pubkey.pem

   cp list_unsig.lst list_sig.lst

   lcp_crtpollist --sign --pub pubkey.pem --priv privkey.pem --out list_sig.lst

   lcp_crtpol2 --create --type list --pol list.pol --data list.data list_{unsig,sig}.lst

   tcsd

Load LCP into TPM NVRAM

   lcp_writepol -z -i owner -f list.pol

   lcp_writepol -z -i 0x20000001 -f vl.pol

Create new grub.conf entry

title tboot
    root (hd0,0)
    kernel /tboot.gz loglvl=all logging=serial,vga,memory vga_delay=1
    module /vmlinuz-3.3.4-5.tis.fc17.x86_64 root=/dev/sda3 intel_iommu=on ro
    module /initramfs-3.3.4-5.tis.fc17.x86_64.img
    module /2nd_gen_i5_i7_SINIT_51.BIN
    module /list.data

LCP

Add more in depth information about launch control policy here.

TPM PCRs

PCR	Values
0	CRTM, BIOS, and Host Platform Extensions
1	Host Platform Configuration (BIOS Data)
2	Option ROM Code
3	Option ROM Configuration and Data
4	IPL Code (usually the MBR)
5	IPL Code Configuration and Data (Partition Table?)
6	State Transition and Wake Events
7	Host Platform Manufactuer Control
10	IMA Measurement List
17	TXT Stuff ?!?!
18	SHA-1 Hash of MLE (Kernel and initrd? Defined by LCP?)

Notes

We may need to modprobe tpm --force=1

Search