How To Get Your Platform Integrity Information

Using KNOPPIX511 for Trusted Computing Geeks v1.0.1

1. Download ISO image and create bootable CD

Geeks ISO image is available from Japanese English

Reference
Ubuntu Burning ISO How To JapaneseEnglish

2. Enable TPM

If you are not enable the TPM yet. Goto BIOS setup menu and enable TPM at the boot.

Vendor Key to enter BIOS menu Location of TPM setup menu Comments
IBM, Lenovo F1 Security -> IBM Security Chip
Panasonic   F2 Security tab -> Embedded Security (TPM)Sub-Menu -> Embedded Security Chip -> Enable Requires Supervisor PW
HP F10 Security menu -> System Security -> Embedded Security Device Support requires setup password
DELL
Fujitsu
NEC F2

Ref http://www.michaelstevenstech.com/bios_manufacturer.htm

3. Boot the Geeks CD

After your Desktop is displayed, Start terminal and correct platform info as follows:

$ su
# cd /tmp
# /opt/OpenPlatformTrustServices/bin/getiml info
tar cvfz info.tgz ./info/*

Now /tmp has info.tgz file.

3.1 Save the info to USB

Insert USB memory. USB will be mounted on /media/sda1 or /media/sdb1.

# cp /tmp/nfo.tgz /media/sda1/

4. Send us your Platform Integrity Information (OPTION)

We would like to use this data to update PlatformInfo page. If you'll please send the tar ball to munetoh at users.sourceforge.jp

note) dmidecode reports your SMBIOS information. this is usefull to identify the BIOS metadata, e.g. P/N and BIOS version, but it also include an identity of your machine. Thus, please delete Serial Number and UUID in System Information section before send. thanks.

We appreciate your cooperation. :-)

5. Install Knoppix to USB Memory (OPTION)

USB boot also supports Trusted Boot.

$ su
# mkbootdev

This will install syslinux. Next step, we update IPL to Grub-IMA. e.g. USB drive at /dev/sda, and mounted on /media/sda1

# grub-install --recheck --no-floppy --root-directory=/media/sda1 /dev/sda
# cp /cdrom/boot/grub/grub.conf /media/sda1/boot/grub/