You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/iot-edge/how-to-provision-devices-at-scale-linux-tpm.md
+22-32Lines changed: 22 additions & 32 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -143,51 +143,41 @@ After the installation is finished and you've signed back in to your VM, you're
143
143
144
144
In this section, you use the TPM2 software tools to retrieve the endorsement key for your TPM and then generate a unique registration ID.
145
145
146
-
1. Sign in to your device, and install the `tpm2-tools` package.
146
+
# [Ubuntu / Debian / Raspberry Pi OS](#tab/ubuntu+debian+rpios)
147
147
148
+
1. Sign in to your device, and install the `tpm2-tools` package.
148
149
149
-
# [Ubuntu](#tab/ubuntu)
150
+
```bash
151
+
sudo apt-get install tpm2-tools
152
+
```
150
153
154
+
1. Run the following commands to read the endorsement key in your TPM and generate a unique registration ID. This assumes the endorsement key is at the default location of 0x81010001.
1. The output window displays the device's **Registration ID** and the **Endorsement key**. Copy these values for use later when you create an individual enrollment for your device in the device provisioning service.
172
162
173
163
# [Red Hat Enterprise Linux](#tab/rhel)
174
164
165
+
1. Sign in to your device, and install the `tpm2-tools` package.
175
166
176
-
```bash
177
-
sudo yum install tpm2-tools
178
-
179
-
```
167
+
```bash
168
+
sudo yum install tpm2-tools
169
+
```
180
170
181
-
---
171
+
1. Run the following commands to read the endorsement key in your TPM and generate a unique registration ID. This assumes the endorsement key is at the default location of 0x81010001.
182
172
183
-
1. Run the following commands to read the endorsement key in your TPM and generate a unique registration ID. This assumes the endorsement key is at the default location of 0x81010001.
1. The output window displays the device's **Registration ID** and the **Endorsement key**. Copy these values foruse later when you create an individual enrollment for your devicein the device provisioning service.
189
179
190
-
1. The output window displays the device's **Registration ID** and the **Endorsement key**. Copy these values for use later when you create an individual enrollment for your device in the device provisioning service.
180
+
---
191
181
192
182
> [!TIP]
193
183
> If you don't want to use the TPM2 software tools to retrieve the information, you need to find another way to obtain the provisioning information. The endorsement key, which is unique to each TPM chip, is obtained from the TPM chip manufacturer associated with it. You can derive a unique registration ID for your TPM device. For example, you can create an SHA-256 hash of the endorsement key.
0 commit comments