[tpm2] Re: Re-provision TPM
Steven Clark <davolfman at gmail.com>
| Newsgroups | dev.linux.lists.tpm2 |
|---|---|
| Message-ID | <CAOCvsSmHHJBW1ha4n2Yc7MCfA3nK9MNUkg1z8L7NqPkS8R1+yQ@mail.gmail.com> |
On Linux one of the absolute worst-case options to nuke a TPM and start over is to use the sysfs PPI interface to the TPM: Issue a clear request like: echo 5 > /sys/class/tpm/tpm0/ppi/request and reboot. You then confirm that you really do want the BIOS to wipe the TPM and it's done. If something has set auths and you don't know what it is, this a pretty decent last resort if you've got the support.
attachment.htm
(text/html, 461 B)
<div dir="ltr">On Linux one of the absolute worst-case options to nuke a TPM and start over is to use the sysfs PPI interface to the TPM:<div>Issue a clear request like:<br>echo 5 > /sys/class/tpm/tpm0/ppi/request<br>and reboot. You then confirm that you really do want the BIOS to wipe the TPM and it's done. If something has set auths and you don't know what it is, this a pretty decent last resort if you've got the support.</div></div>