Dasharo Security: TPM Support

Test cases common documentation

Test setup

Proceed with the Generic test setup: firmware.
Proceed with the Generic test setup: OS installer.
Proceed with the Generic test setup: OS installation.
Proceed with the Generic test setup: OS boot from disk.

TPM001.001 TPM Support (firmware)

Test description

This test aims to verify that the TPM is initialized correctly and the PCRs can be accessed from the firmware.

Test configuration data

FIRMWARE = Dasharo

Test setup

Proceed with the Test cases common documentation section.

Test steps

Power on the DUT.
Boot into the BIOS.
Enter the shell.
Run the following command in the shell:
```
cbmem -L
```

Expected result

The command should return information about the TPM log entries.

Example output:

TPM2 log:
    Specification: 2.00
    Platform class: PC Client
    No vendor information provided
TPM2 log entry 1:
    PCR: 2
    Event type: Action
    Digests:
         SHA1: f78a530fb5a70afcffdc86a98529abd24a90bac9
    Event data: FMAP: FMAP
TPM2 log entry 2:
    PCR: 2
    Event type: Action
    Digests:
         SHA1: 369155e6eab3b0a874140e591a4c0e992268b4b9
    Event data: FMAP: BOOTBLOCK
TPM2 log entry 3:
    PCR: 2
    Event type: Action
    Digests:
         SHA1: 5e785c080264aa6e169f70c80ac40b556066292b
    Event data: FMAP: COREBOOT CBFS: fallback/romstage
TPM2 log entry 4:
    PCR: 2
    Event type: Action
    Digests:
         SHA1: ba2a5af955811fbac58a5198545539596eb38c3e
    Event data: FMAP: COREBOOT CBFS: fallback/ramstage
TPM2 log entry 5:
    PCR: 2
    Event type: Action
    Digests:
         SHA1: ba35d4ce29d7b633b5644e2a3206c6069cf7f24d
    Event data: FMAP: COREBOOT CBFS: fallback/payload
TPM2 log entry 6:
    PCR: 2
    Event type: Action
    Digests:
         SHA1: 47b49026133377e05193f8440c9a7cad239e883c
    Event data: FMAP: COREBOOT CBFS: 1-cpu.dtb
TPM2 log entry 7:
    PCR: 3
    Event type: Action
    Digests:
         SHA256: 6e7b06693452d997ac534e823b1ea79e5bb8ed19ba8a7af878abf10199c3d515
         SHA1: 6e7b06693452d997ac534e823b1ea79e5bb8ed19
    Event data: VERSION
TPM2 log entry 8:
    PCR: 2
    Event type: Action
    Digests:
         SHA256: de73053377e1ae5ba5d2b637a4f5bfaeb410137722f11ef135e7a1be524e3092
         SHA1: de73053377e1ae5ba5d2b637a4f5bfaeb4101377
    Event data: IMA_CATALOG
TPM2 log entry 9:
    PCR: 4
    Event type: Action
    Digests:
         SHA256: ba427f9349b1f9e589f98909e26086b0cfd5ced78a7fbcb140a70a506c38a8e5
         SHA1: ba427f9349b1f9e589f98909e26086b0cfd5ced7
    Event data: BOOTKERNEL
(...)

TPM001.002 TPM Support (Ubuntu 22.04)

Test description

This test aims to verify that the TPM is initialized correctly and the PCRs can be accessed from the operating system.

Test configuration data

FIRMWARE = Dasharo
OPERATING_SYSTEM = Ubuntu 22.04

Test setup

Proceed with the Test cases common documentation section.
Install the tpm2-tools package: sudo apt install tpm2-tools.

Test steps

Power on the DUT.
Boot into the system.
Log into the system by using the proper login and password.
Check the version of installed tpm2-tools - execute the following command in the terminal:
```
dpkg --list tpm2-tools
```
If your device is equipped with TPM2.0 and the version of tpm2-tools is 4.0 or higher - execute the following command in the terminal:
```
tpm2_pcrread
```
If your device is equipped with TPM2.0 and the version of tpm2-tools is lower than 4.0 - execute the following command in the terminal:
```
tpm2_pcrlist
```
If your device is equipped with TPM1.2 - execute the following command in the terminal:
```
cat /sys/class/tpm/tpm0/pcrs
```

Expected result

The command should return a list of PCRs and their contents.

Output example for TPM2.0:

sha1 :
  0  : 3a3f780f11a4b49969fcaa80cd6e3957c33b2275
  1  : 8a074fdf65a11e5dbf02d25e7f26b00c26c98b41
  2  : c36c2509d636c9cfa075d6d0a03b7a37bec14ee9
  3  : 3a3f780f11a4b49969fcaa80cd6e3957c33b2275
  4  : 2d247bb671ec17ded623ca45967df5482517291b
  5  : 49d543eb1d1df3439d9fca695ee47b8cdf4b9e2f
  6  : 3a3f780f11a4b49969fcaa80cd6e3957c33b2275
  7  : 3a3f780f11a4b49969fcaa80cd6e3957c33b2275
  8  : 0000000000000000000000000000000000000000
  9  : 0000000000000000000000000000000000000000
  10 : 0000000000000000000000000000000000000000
  11 : 0000000000000000000000000000000000000000
  12 : 0000000000000000000000000000000000000000
  13 : 0000000000000000000000000000000000000000
  14 : 0000000000000000000000000000000000000000
  15 : 0000000000000000000000000000000000000000
  16 : 0000000000000000000000000000000000000000
  17 : ffffffffffffffffffffffffffffffffffffffff
  18 : ffffffffffffffffffffffffffffffffffffffff
  19 : ffffffffffffffffffffffffffffffffffffffff
  20 : ffffffffffffffffffffffffffffffffffffffff
  21 : ffffffffffffffffffffffffffffffffffffffff
  22 : ffffffffffffffffffffffffffffffffffffffff
  23 : 0000000000000000000000000000000000000000
sha256 :
  0  : d27cc12614b5f4ff85ed109495e320fb1e5495eb28d507e952d51091e7ae2a72
  1  : b29a64bd6895966b777eb803f45e6bbffade81cc1b996a34f7cbd26f1d04028b
  2  : 3122422e43b9fbfc0cb70eb467b55e99ec61462370e6b15c515484f821e1d4d9
  3  : 909e4261938378c0556a4c335c38718d1c313bd151fdf222df674aabb7aeee97
  4  : 984763b42633ee11e5167e2f67c2e6879bd6efac683f1df1ef16d7ce96d4b49b
  5  : dab92c45eeb765e29784f8cc33f92d0a39afed173f2b07e0e328586c3c3b19ed
  6  : d27cc12614b5f4ff85ed109495e320fb1e5495eb28d507e952d51091e7ae2a72
  7  : d27cc12614b5f4ff85ed109495e320fb1e5495eb28d507e952d51091e7ae2a72
  8  : 0000000000000000000000000000000000000000000000000000000000000000
  9  : 0000000000000000000000000000000000000000000000000000000000000000
  10 : 0000000000000000000000000000000000000000000000000000000000000000
  11 : 0000000000000000000000000000000000000000000000000000000000000000
  12 : 0000000000000000000000000000000000000000000000000000000000000000
  13 : 0000000000000000000000000000000000000000000000000000000000000000
  14 : 0000000000000000000000000000000000000000000000000000000000000000
  15 : 0000000000000000000000000000000000000000000000000000000000000000
  16 : 0000000000000000000000000000000000000000000000000000000000000000
  17 : ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff
  18 : ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff
  19 : ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff
  20 : ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff
  21 : ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff
  22 : ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff
  23 : 0000000000000000000000000000000000000000000000000000000000000000

Output example for TPM1.2:

PCR-00: B3 F3 60 E1 D5 1F 82 D4 62 E6 B9 69 92 2F 65 F4 9F 1A 5F 8E
PCR-01: 21 9F 1F 4A C1 AD AD 4D F1 8B 9F AB 98 23 68 B1 73 A6 32 87
PCR-02: 40 CF E3 DC A7 FF 67 FB AA BB 20 85 A4 39 43 D8 54 A7 AB 98
PCR-03: E3 E7 E6 89 CA FB F5 75 38 95 D0 CD 83 96 F6 0C 38 04 DC D5
PCR-04: 01 7A 3D E8 2F 4A 1B 77 FC 33 A9 03 FE F6 AD 27 EE 92 BE 04
PCR-05: 93 6A 12 98 07 73 85 9D 91 27 61 82 E7 11 C5 1D 08 98 C4 28
PCR-06: 3A 3F 78 0F 11 A4 B4 99 69 FC AA 80 CD 6E 39 57 C3 3B 22 75
PCR-07: 3A 3F 78 0F 11 A4 B4 99 69 FC AA 80 CD 6E 39 57 C3 3B 22 75
PCR-08: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
PCR-09: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
PCR-10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
PCR-11: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
PCR-12: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
PCR-13: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
PCR-14: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
PCR-15: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
PCR-16: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
PCR-17: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
PCR-18: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
PCR-19: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
PCR-20: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
PCR-21: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
PCR-22: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
PCR-23: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

TPM001.003 TPM Support (Windows 11)

Test description

This test aims to verify that the TPM is initialized correctly and the PCRs can be accessed from the operating system.

Test configuration data

FIRMWARE = Dasharo
OPERATING_SYSTEM = Windows 11

Test setup

Proceed with the Test cases common documentation section.

Test steps

Power on the DUT.
Boot into the system.
Log into the system by using the proper login and password.
Open a PowerShell as administrator and run the following command:
```
get-tpm
```

Expected result

The command should return information about the TPM state: if the TPM is present, ready and enabled:

TpmPresent     : True
TpmReady       : True
TpmEnabled     : True

TPM002.001 Verify TPM version (firmware)

Test description

This test aims to verify that the TPM version is correctly recognized by the firmware.

Test configuration data

FIRMWARE = Dasharo

Test setup

Proceed with the Test cases common documentation section.

Test steps

Power on the DUT.
Boot into the BIOS.
Enter the shell.
Run the following command in the shell:
```
cbmem -L
```

Expected result

The output of the command should contain information about the TPM version.

Example output:

TPM2 log:
    Specification: 2.00

TPM002.002 Verify TPM version (Ubuntu 22.04)

Test description

This test aims to verify that the TPM version is correctly recognized by the operating system.

Test configuration data

FIRMWARE = Dasharo
OPERATING_SYSTEM = Ubuntu 22.04

Test setup

Proceed with the Test cases common documentation section.

Test steps

Power on the DUT.
Boot into the system.
Log into the system by using the proper login and password.
Check the version of installed tpm2-tools - execute the following command in the terminal:
```
dmesg | grep -i tpm
```

Expected result

The command should return information about the TPM version.

Example output:

tpm_tis 00:07: 1.2 TPM (device-id 0x0, rev-id 78)

TPM002.003 Verify TPM version (Windows 11)

Test description

This test aims to verify that the TPM version is correctly recognized by the operating system.

Test configuration data

FIRMWARE = Dasharo
OPERATING_SYSTEM = Windows 11

Test setup

Proceed with the Test cases common documentation section.

Test steps

Power on the DUT.
Boot into the system.
Log into the system by using the proper login and password.

Open a PowerShell as administrator and run the following command:

wmic /namespace:\\root\cimv2\security\microsofttpm path win32_tpm get * /format:textvaluelist.xsl

Expected result

The command should return information about the TPM version.

Example output:

SpecVersion=2.0

TPM003.001 Check TPM Physical Presence Interface (firmware)

Test description

This test aims to verify that the TPM Physical Presence Interface is supported by the firmware.

Test configuration data

FIRMWARE = Dasharo
OPERATING_SYSTEM = Ubuntu 22.04
Download cbmem from https://cloud.3mdeb.com/index.php/s/zTqkJQdNtJDo5Nd to the DUT.

Test setup

Proceed with the Test cases common documentation section.

Test steps

Power on the DUT.
Boot into the system.
Log into the system by using the proper login and password.
Open the terminal and run the following command and note results:
```
sudo cbmem -1 |grep PPI
```

Expected result

The cbmem.log should contain the following lines (the hex numbers may be different per platform):

[DEBUG]  PPI: Pending OS request: 0x0 (0x0)
[DEBUG]  PPI: OS response: CMD 0x39073907 = 0x0
[DEBUG]    TPM PPI     8. 0x76ffe620 0x0000015a

If the above lines are present, the firmware supports TPM PPI.

TPM003.002 Check TPM Physical Presence Interface (Ubuntu 22.04)

Test description

This test aims to verify that the TPM Physical Presence Interface is correctly recognized by the operating system.

Test configuration data

FIRMWARE = Dasharo
OPERATING_SYSTEM = Ubuntu 22.04
Platform with TPM 2.0 module present.

Test setup

Proceed with the Test cases common documentation section.

Test steps

Power on the DUT.
Boot into the system.
Log into the system by using the proper login and password.
Open the terminal and run the following command to check the version of TPM PPI in sysfs:
```
cat /sys/class/tpm/tpm0/ppi/version
```

Expected result

The command should return information about the TPM PPI version (only 1.3 is valid). If PPI is not available the file will not be found and test fails.

Example output:

$ cat /sys/class/tpm/tpm0/ppi/version
1.3

TPM003.003 Check TPM Physical Presence Interface (Windows 11)

Test description

This test aims to verify that the TPM Physical Presence Interface is correctly recognized by the operating system.

Test configuration data

FIRMWARE = Dasharo
OPERATING_SYSTEM = Windows 11
Platform with TPM 2.0 module present.

Test setup

Proceed with the Test cases common documentation section.

Test steps

Power on the DUT.
Boot into the system.
Log into the system by using the proper login and password.
Open a PowerShell as administrator and run the following command:
```
tpmtool getdeviceinformation
```

Expected result

The command should return information about the TPM PPI version (only 1.3 is valid). If PPI is not available on the list, test fails.

Example output:

tpmtool getdeviceinformation

-TPM Present: True
-TPM Version: 2.0
-TPM Manufacturer ID: INTC
-TPM Manufacturer Full Name: Intel
-TPM Manufacturer Version: 600.18.0.0
-PPI Version: 1.3
-Is Initialized: True
-Ready For Storage: True
-Ready For Attestation: True
-Is Capable For Attestation: True
-Clear Needed To Recover: False
-Clear Possible: True
-TPM Has Vulnerable Firmware: False
-Maintenance Task Complete: True
-Bitlocker PCR7 Binding State: Binding Not Possible
-TPM Spec Version: 1.38
-TPM Errata Date: Wednesday, December 18, 2019
-PC Client Version: 1.04
-Lockout Information:
    -Is Locked Out: False
    -Lockout Counter: 0
    -Max Auth Fail: 32
    -Lockout Interval: 7200s
    -Lockout Recovery: 86400s

TPM003.004 Change active PCR banks with TPM PPI (firmware)

Test description

This test aims to verify that the TPM Physical Presence Interface is working properly in the firmware by changing active TPM PCR banks.

Test configuration data

FIRMWARE = Dasharo
Platform with TPM 2.0 module present.
TPM003.001 indicating that TPM PPI is supported.

Test setup

Proceed with the Test cases common documentation section.

Test steps

Power on the DUT.
Boot into the firmware setup using the BIOS_SETUP_KEY.
Enter the Device Manager -> TCG2 Configuration.
Scroll down to the bottom of the page using arrow down key.
Switch active PCR banks depending on the currently active banks.:
if both SHA1 and SHA256 are active, deactivate SHA1
if SHA1 only is active, activate SHA256 and deactivate SHA1
if SHA256 only is active, activate SHA1 and deactivate SHA256
Press F10 to save and go back to the main setup page using ESC key.
Use the Reset option on the main setup page to reboot the DUT.
After reset a prompt should appear explaining a TPM state change request has been made. Press F12 as instructed to apply changes. The DUT will need to reboot again.
After the reboot enter the Device Manager -> TCG2 Configuration again.
Scroll down to the bottom of the page using arrow down key.
Verify the active PCR banks were changed according to the choice made in step 5.

NOTE: Certain TPMs like Intel PTT (fTPM) do not allow to set more than one active PCR bank at a given time, that is why the test case keeps only one bank active. Discrete TPMs may have multiple banks enabled simultaneously, but it is TPM module and TPM firmware dependent.

Expected result

The prompt appears at step 8.
The requested changes are applied as verified in step 11.

The prompt seen on the DUT screen has the following format (example change from SHA256 to SHA1):

A configuration change was requested to PCR bank(s) of this computer's TPM
(Trusted Platform Module)

WARNING: Changing the PCR bank(s) of the boot measurements may prevent the
Operating System from properly processing the measurements. Please check if
your Operating System supports the new PCR bank(s).

WARNING: Secrets in the TPM that are bound to the boot state of your machine
may become unusable.

Current PCRBanks is 0x2. (SHA256)
New PCRBanks is 0x1. (SHA1)

Press F12 change the boot measurements to use PCR bank(s) of the TPM
Press ESC to reject this change request and continue