From 64f37cc530f144e53c190c9e8209a51b58fd5c43 Mon Sep 17 00:00:00 2001 From: Stefan Berger Date: Tue, 7 Sep 2021 17:05:52 -0400 Subject: tcgbios: Disable platform hierarchy in case of failure In the rare case of a TPM 2 failure, disable the platform hierarchy after disabling the endorsement and owner hierarchies. Signed-off-by: Stefan Berger --- src/tcgbios.c | 1 + 1 file changed, 1 insertion(+) (limited to 'src/tcgbios.c') diff --git a/src/tcgbios.c b/src/tcgbios.c index 02921d8..31f4d7b 100644 --- a/src/tcgbios.c +++ b/src/tcgbios.c @@ -983,6 +983,7 @@ tpm_set_failure(void) case TPM_VERSION_2: tpm20_hierarchycontrol(TPM2_RH_ENDORSEMENT, TPM2_NO); tpm20_hierarchycontrol(TPM2_RH_OWNER, TPM2_NO); + tpm20_hierarchycontrol(TPM2_RH_PLATFORM, TPM2_NO); break; } -- cgit v1.1