File tree Expand file tree Collapse file tree 2 files changed +17
-0
lines changed
Expand file tree Collapse file tree 2 files changed +17
-0
lines changed Original file line number Diff line number Diff line change @@ -150,8 +150,25 @@ and data they use and also show up in the event log. You can find more details
150150in the documentation of respective tools (e.g., for [ GRUB2] [ grub ] or
151151[ shim] [ shim ] ).
152152
153+ Due to this fact the failing to reconstruct some of the PCRs does not
154+ mean a firmware issue.
155+
156+ The table below shows the PCR Usage according to
157+ [ TCG PC Client Platform Firmware Profile Specification] [ tcg-pcclient-pfps ] .
158+ The firmware mainly uses the PCRs in range 0-7, and the range 8-15 is reserved
159+ for the OS:
160+ ![ PCR usage table] ( images/pcr_usage.png )
161+
162+ It's worth keeping that in mind when analysing the reconstructed PCRs,
163+ as especially the PCR 10 extended by
164+ [ Integrity Management Architecture] ( https://ima-doc.readthedocs.io/en/latest/index.html )
165+ implementation in Linux
166+ [ had a history of failing to be reconstructed from the TPM logs] [ pcr_10_issue ] .
167+
153168[ grub ] : https://www.gnu.org/software/grub/manual/grub/html_node/Measured-Boot.html
154169[ shim ] : https://github.com/rhboot/shim/blob/master/README.tpm
170+ [ tcg-pcclient-pfps ] : https://trustedcomputinggroup.org/wp-content/uploads/TCG_PCClient_PFP_r1p05_v23_pub.pdf
171+ [ pcr_10_issue ] : https://github.com/Dasharo/dasharo-issues/issues/1709#issuecomment-3791854544
155172
156173## Caveats
157174
You can’t perform that action at this time.
0 commit comments