[tpm2] Re: Installing on FreeBSD?

John Connett <jrc at skylon.me.uk> Thu, 31 Mar 2022 20:16:41 +0100

Newsgroups	dev.linux.lists.tpm2
Message-ID	<[email protected]>

On 31/03/2022 15:05, Tadeusz Struk wrote:

> On 3/31/22 03:55, John Connett wrote:
>> Is there a simple, step-by-step guide for installing tpm2 on FreeBSD?
>
> What about:
> $ sudo pkg install tpm2-abrmd tpm2-tools
>
> That should install and configure everything.

That's what I would have hoped. However, I've found several problems:

 1. /usr/local/etc/rc.d/tpm2-abrmd
    The line starting "desc=" breaks the script because of the un-quoted
    multi-word description text value. Putting quotes around the text
    value fixes it.
 2. /dev/tpm0
    This has owner root. A temporary fix is to change the owner to
    "_tss" which allows tpm2_getrandom to work. Not sure how the
    ownership and permissions are supposed to be set?
 3. Hyper-V Virtual TPM not found
    With FreeBSD installed on a Generation 2 VM on a Windows 11 host the
    Virtual TPM is not found. Ubuntu installed on the same VM does find
    the Virtual TPM.

Not quite as smooth as I anticipated. However, the problems are probably 
with the packaging for FreeBSD rather than tpm2-software issues. I've 
copied this to the maintainer of tpm2-tss for FreeBSD in case they have 
any comments.

Thanks
--
John

attachment.htm (text/html, 1.7 KB)

<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body>
    <p>On 31/03/2022 15:05, Tadeusz Struk wrote:<br>
    </p>
    <blockquote type="cite"
      cite="mid:[email protected]">On
      3/31/22 03:55, John Connett wrote:
      <br>
      <blockquote type="cite">Is there a simple, step-by-step guide for
        installing tpm2 on FreeBSD?
        <br>
      </blockquote>
      <br>
      What about:
      <br>
      $ sudo pkg install tpm2-abrmd tpm2-tools
      <br>
      <br>
      That should install and configure everything.
      <br>
    </blockquote>
    <p>That's what I would have hoped. However, I've found several
      problems:</p>
    <ol>
      <li>/usr/local/etc/rc.d/tpm2-abrmd<br>
        The line starting "desc=" breaks the script because of the
        un-quoted multi-word description text value. Putting quotes
        around the text value fixes it.</li>
      <li>/dev/tpm0<br>
        This has owner root. A temporary fix is to change the owner to
        "_tss" which allows tpm2_getrandom to work. Not sure how the
        ownership and permissions are supposed to be set?<br>
      </li>
      <li>Hyper-V Virtual TPM not found<br>
        With FreeBSD installed on a Generation 2 VM on a Windows 11 host
        the Virtual TPM is not found. Ubuntu installed on the same VM
        does find the Virtual TPM.</li>
    </ol>
    <p>Not quite as smooth as I anticipated. However, the problems are
      probably with the packaging for FreeBSD rather than tpm2-software
      issues. I've copied this to the maintainer of tpm2-tss for FreeBSD
      in case they have any comments.<br>
    </p>
    <p>Thanks<br>
      --<br>
      John<br>
    </p>
  </body>
</html>

OpenPGP_0x8F3115112EB8DB54.asc (application/pgp-keys, 2.1 KB)

OpenPGP_signature.sig (application/pgp-signature, 495 B) - not displayed