diff options
| author | Daan De Meyer <daan.j.demeyer@gmail.com> | 2024-05-17 16:20:11 +0200 |
|---|---|---|
| committer | Yu Watanabe <watanabe.yu+github@gmail.com> | 2024-06-12 11:31:21 +0200 |
| commit | d6518003f8ebbfb6f85dbf227736ae05b0961199 (patch) | |
| tree | 040a876d50056be1d18acd434d5dd4522348dc82 /catalog | |
| parent | Merge pull request #32847 from YHNdnzj/exitrd (diff) | |
| download | systemd-d6518003f8ebbfb6f85dbf227736ae05b0961199.tar.xz systemd-d6518003f8ebbfb6f85dbf227736ae05b0961199.zip | |
tpm2-setup: Don't fail if we can't access the TPM due to authorization failure
The TPM might be password/pin protected for various reasons even if
there is no SRK yet. Let's handle those cases gracefully instead of
failing the unit as it is enabled by default.
Diffstat (limited to 'catalog')
| -rw-r--r-- | catalog/systemd.catalog.in | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/catalog/systemd.catalog.in b/catalog/systemd.catalog.in index 3c9a6860da..2831152763 100644 --- a/catalog/systemd.catalog.in +++ b/catalog/systemd.catalog.in @@ -780,3 +780,16 @@ Documentation: https://systemd.io/PORTABLE_SERVICES/ A Portable Service @PORTABLE_ROOT@ (with extensions: @PORTABLE_EXTENSION@) has been detached from the system and is no longer available for use. The list of attached Portable Services can be queried with 'portablectl list'. + +-- ad7089f928ac4f7ea00c07457d47ba8a +Subject: Authorization failure while attempting to enroll SRK into TPM +Defined-By: systemd +Support: %SUPPORT_URL% +Documentation: man:systemd-tpm2-setup.service(8) + +An authorization failure occured while attempting to enroll a Storage Root Key (SRK) on the Trusted Platform +Module (TPM). Most likely this means that a PIN/Password (authValue) has been set on the Owner hierarchy of +the TPM. + +Automatic SRK enrollment on TPMs in such scenarios is not supported. In order to unset the PIN/password +protection on the owner hierarchy issue a command like the following: 'tpm2_changeauth -c o -p <OLDPW> ""'. |