Skip to content

TPM: add configurable TPM key handles#3623

Open
itsManjeet wants to merge 1 commit into
DMTF:mainfrom
itsManjeet:configurable-tpm-handles
Open

TPM: add configurable TPM key handles#3623
itsManjeet wants to merge 1 commit into
DMTF:mainfrom
itsManjeet:configurable-tpm-handles

Conversation

@itsManjeet
Copy link
Copy Markdown
Contributor

@itsManjeet itsManjeet commented May 13, 2026

Generate the TPM key-handle configuration at CMake configure time instead of
using fixed values in keys.h. This lets platforms provide requester/responder
key handles and certificate-chain NV indices without editing the TPM device
secret library.

-D LIBSPDM_TPM_REQUESTER_HANDLES="0x81000011;0x81000012"
-D LIBSPDM_TPM_REQUESTER_CERTCHAINS="0x1500011;0x1500012"
-D LIBSPDM_TPM_RESPONDER_HANDLES="0x81000021;0x81000022"
-D LIBSPDM_TPM_RESPONDER_CERTCHAINS="0x1500021;0x1500022"

@itsManjeet itsManjeet force-pushed the configurable-tpm-handles branch from fd3adde to 54853df Compare May 13, 2026 10:35
@itsManjeet itsManjeet force-pushed the configurable-tpm-handles branch 2 times, most recently from ee4b66f to 1843495 Compare May 25, 2026 04:28
@itsManjeet itsManjeet marked this pull request as ready for review May 25, 2026 04:28
@itsManjeet itsManjeet force-pushed the configurable-tpm-handles branch 3 times, most recently from ff07e2e to a441ce8 Compare May 25, 2026 06:31
@itsManjeet itsManjeet marked this pull request as draft June 1, 2026 14:07
@itsManjeet itsManjeet force-pushed the configurable-tpm-handles branch 5 times, most recently from 9582b39 to 9d1e3cb Compare June 2, 2026 09:41
@itsManjeet itsManjeet marked this pull request as ready for review June 2, 2026 10:08
Generate the TPM key-handle configuration at CMake configure time instead of
using fixed values in keys.h. This lets platforms provide requester/responder
key handles and certificate-chain NV indices without editing the TPM device
secret library.

-D LIBSPDM_TPM_REQUESTER_HANDLES="0x81000011;0x81000012"
-D LIBSPDM_TPM_REQUESTER_CERTCHAINS="0x1500011;0x1500012"
-D LIBSPDM_TPM_RESPONDER_HANDLES="0x81000021;0x81000022"
-D LIBSPDM_TPM_RESPONDER_CERTCHAINS="0x1500021;0x1500022"

Signed-off-by: Manjeet Singh <itsmanjeet1998@gmail.com>
@itsManjeet itsManjeet force-pushed the configurable-tpm-handles branch from 9d1e3cb to c1faf06 Compare June 2, 2026 10:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant