xCAT/confluent
2
0
Fork 0
mirror of https://github.com/xcat2/confluent.git synced 2024-11-21 17:11:58 +00:00
Code Issues Projects Releases Wiki Activity

Some notes on TPM recovery

Browse Source
This commit is contained in:
Jarrod Johnson 2022-09-21 10:50:05 -04:00
parent ba7832eb40
commit 25c66e163c
1 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
misc/tpmnotes Normal file
View File

@ -0,0 +1,11 @@
TPM 2 DA (Dictionary Attack) protection triggers on 'unclean' reboots.
If it has been tripped already:
echo 5 > /sys/class/tpm/tpm0/ppi/request
Then reboot to resume normal operation
To configure DA:
tpm2_dictionarylockout --setup-parameters --max-tries=4294967295 --clear-lockout
Further, TPMA_OBJECT_NODA attribute may be useful, see https://github.com/systemd/systemd/issues/20668