Sample Header Ad - 728x90

How to determine if computer has TPM (Trusted Platform Module) available

41 votes
2 answers
103036 views
Wanting to play around with [Trusted Platform Module](https://en.wikipedia.org/wiki/Trusted_Platform_Module) stuff, I installed [TrouSerS](http://trousers.sourceforge.net/) and tried to start [tcsd](https://linux.die.net/man/8/tcsd) , but I got this error: TCSD TDDL ERROR: Could not find a device to open! However, my kernel has multiple TPM modules loaded: # lsmod | grep tpm tpm_crb 16384 0 tpm_tis 16384 0 tpm_tis_core 20480 1 tpm_tis tpm 40960 3 tpm_tis,tpm_crb,tpm_tis_core So, how do I determine if my computer is lacking TPM vs TrouSerS having a bug? Neither [dmidecode](https://linux.die.net/man/8/dmidecode) nor [cpuid](https://linux.die.net/man/1/cpuid) output anything about "tpm" or "trust". Looking in /var/log/messages, on the one hand I see rngd: /dev/tpm0: No such file or directory, but on the other hand I see kernel: Initialise system trusted keyrings and according to [this kernel doc](https://www.kernel.org/doc/Documentation/security/keys-trusted-encrypted.txt) trusted keys use TPM. **EDIT**: My computer's BIOS setup menus mention nothing about TPM. Also, looking at /proc/keys: # cat /proc/keys ******** I--Q--- 1 perm 1f3f0000 0 65534 keyring _uid_ses.0: 1 ******** I--Q--- 7 perm 3f030000 0 0 keyring _ses: 1 ******** I--Q--- 3 perm 1f3f0000 0 65534 keyring _uid.0: empty ******** I------ 2 perm 1f0b0000 0 0 keyring .builtin_trusted_keys: 1 ******** I------ 1 perm 1f0b0000 0 0 keyring .system_blacklist_keyring: empty ******** I------ 1 perm 1f0f0000 0 0 keyring .secondary_trusted_keys: 1 ******** I------ 1 perm 1f030000 0 0 asymmetri Fedora kernel signing key: 34ae686b57a59c0bf2b8c27b98287634b0f81bf8: X509.rsa b0f81bf8 []
Asked by Matthew Cline (3565 rep)
Feb 1, 2017, 12:56 AM
Last activity: Dec 27, 2024, 08:17 AM