Skip to content

Commit

Permalink
[main] Include tpmd configuration section from IIS (#6560)
Browse files Browse the repository at this point in the history
`aziot-tpmd` now has configuration options for TCTI loader string, DPS key storage index, and hierarchy authorization values. These are now included in the template configuration.

For technical discussion on the `aziot-tpmd` changes, see Azure/iot-identity-service#415.

## Azure IoT Edge PR checklist:
  • Loading branch information
onalante-msft authored Aug 8, 2022
1 parent f11a09a commit 0a65c31
Showing 1 changed file with 29 additions and 0 deletions.
29 changes: 29 additions & 0 deletions edgelet/contrib/config/linux/template.toml
Original file line number Diff line number Diff line change
Expand Up @@ -259,6 +259,35 @@
# pk = "pkcs11:slot-id=0;object=local-ca?pin-value=1234" # PKCS#11 URI


# ==============================================================================
# TPM
# ==============================================================================
#
# If special configuration is required for the TPM when using DPS TPM
# provisioning, uncomment any pertinent sections below.

# [tpm]
# # TCTI loader string; see "TCG TSS 2.0 TPM Command Transmission
# # Interface (TCTI) API Specification" section 3.5 for an overview of
# # acceptable TCTI loader strings. By default, this is "device". Setting
# # this to the empty string will cause the TCTI loader library to try
# # loading a predefined set of TCTI modules in order.
# # Ref: https://github.com/tpm2-software/tpm2-tss/blob/3.1.1/src/tss2-tcti/tctildr-dl.c#L28-L59
# tcti = "swtpm:port=2321"
#
# # The TPM index at which to persist the DPS authentication key. The index is
# # taken as an offset from the base address for persistent objects
# # (0x81000000), and must lie in the range 0x00_00_00--0x7F_FF_FF. The default
# # value is 0x00_01_00.
# auth_key_index = "0x00_01_00"

# # Authorization values for use of the endorsement and owner hierarchies, if
# # necessary. By default, these are empty strings.
# [tpm.hierarchy_authorization]
# endorsement = "hello"
# owner = "world"


# ==============================================================================
# PKCS#11
# ==============================================================================
Expand Down

0 comments on commit 0a65c31

Please sign in to comment.