TPM 2.0 Provisioning

Shankar_l_ — Mon, 04 Apr 2016 10:04:28 GMT

I am trying to provision TPM 2.0 to enable TXT (Trying to create PS and AUX NV indexes). Attached is platform log file from ServerTXTinfo.efi tool.

I have all the TPM 2.0 provisioning tools from Intel with some sample defination files. My TPM 2.0 device is shown grayed out with SHA1 hash policy in BIOS (attached picture 1).

Intel didn't include definition files for SHA1 algorithm so I have modified some files to support SHA1 algorithm. Currently I have these files in provisioning folder (attache picture 2).

I get provisioning failed error when I try to use TPM2TXTPROV.nsh script (attached picture 3).

I have also tried ResetPlatformAuth script but it also results in some error.

Any help will be highly appreciated.

BR,

Shankar

Please disable SHA1 in BIOS

Yd_Y_ — Wed, 06 Dec 2017 03:02:41 GMT

Please disable SHA1 in BIOS Setup and try it again.

topic Please disable SHA1 in BIOS in Software Archive

TPM 2.0 Provisioning

Please disable SHA1 in BIOS