@@ -22,10 +22,6 @@ feature:
22
22
* A `key manager service `__, such as `barbican `__, must be configured to store
23
23
secrets used to encrypt the virtual device files at rest.
24
24
25
- * QEMU version >= 2.11 (>= 2.12 is recommended)
26
-
27
- * Libvirt version >= 5.6.0
28
-
29
25
* The swtpm __ binary and associated libraries __.
30
26
31
27
* Set the :oslo.config:option: `libvirt.swtpm_enabled ` config option to
@@ -50,8 +46,10 @@ traits on the compute node's resource provider:
50
46
Configuring a flavor or image
51
47
-----------------------------
52
48
53
- A vTPM can be requested on a server via :ref: `flavor extra_specs <vtpm-flavor >`
54
- or image metadata properties.
49
+ A vTPM can be requested on a server via flavor extra specs or image metadata
50
+ properties. There are two versions supported - 1.2 and 2.0 - and two models -
51
+ TPM Interface Specification (TIS) and Command-Response Buffer (CRB). The CRB
52
+ model is only supported with version 2.0.
55
53
56
54
.. list-table ::
57
55
:header-rows: 1
@@ -68,6 +66,14 @@ or image metadata properties.
68
66
- Specify the TPM model, ``tpm-tis `` (the default) or ``tpm-crb `` (only
69
67
valid with version ``2.0 ``.
70
68
69
+ For example, to configure a flavor to use the TPM 2.0 with the CRB model:
70
+
71
+ .. code-block :: console
72
+
73
+ $ openstack flavor set $FLAVOR \
74
+ --property hw:tpm_version=2.0 \
75
+ --property hw:tpm_model=tpm-crb
76
+
71
77
Scheduling will fail if flavor and image supply conflicting values, or if model
72
78
``tpm-crb `` is requested with version ``1.2 ``.
73
79
@@ -112,10 +118,14 @@ beyond the scope of this document.
112
118
References
113
119
----------
114
120
121
+ * `TCG PC Client Specific TPM Interface Specification (TIS) `__
122
+ * `TCG PC Client Platform TPM Profile (PTP) Specification `__
115
123
* `QEMU docs on tpm `__
116
124
* `Libvirt XML to request emulated TPM device `__
117
125
* `Libvirt secret for usage type ``vtpm```__
118
126
119
- .. __: https://github.com/qemu/qemu/blob/stable-2.12/docs/specs/tpm.txt
127
+ .. __: https://trustedcomputinggroup.org/resource/pc-client-work-group-pc-client-specific-tpm-interface-specification-tis/
128
+ .. __: https://trustedcomputinggroup.org/resource/pc-client-platform-tpm-profile-ptp-specification/
129
+ .. __: https://qemu.readthedocs.io/en/latest/specs/tpm.html
120
130
.. __: https://libvirt.org/formatdomain.html#elementsTpm
121
131
.. __: https://libvirt.org/formatsecret.html#vTPMUsageType
0 commit comments