3 ms·
Sadly, AMD PSP-based fTPMs emulate only a subset ("Mobile TPM" spec) of a discrete client TPM. This could be addressed with a PSP software update, since the Mi
by transpute 2y ago
Sadly, AMD PSP-based fTPMs emulate only a subset ("Mobile TPM" spec) of a discrete client TPM. This could be addressed with a PSP software update, since the Microsoft reference code for TPMs is open-source.
A full TPM implementation is required to use DRTM (SKINIT) for measured Linux Secure Launch, which is useful for home servers to confirm that the boot loader, kernel and optional immutable OS/VMs have not been modified. Unlike "Secure Boot" SRTM, DRTM adds launch integrity with policy defined by the hardware owner. One would typically use SRTM+DRTM.
The TPM emulation in Microsoft Pluton, which is present in some Ryzen chips, might be sufficient for DRTM. It's tragic that AMD fTPM has limited functionality, since AMD provides SKINIT on all SKUs, unlike Intel where TXT DRTM is limited to vPro.
Some ASRock 4x4 (NUC-sized) mini PCs have pins for discrete TPM.