龙蜥社区：2023可信计算技术最佳实践白皮书（193页）.pdf

1、 白皮书作者白皮书作者 This document is MulanPSL v2 licensed.龙蜥社区及龙蜥操作系统也获得了一定的行业认可，、荣获、“OSCAR 开源尖峰案例奖”等 25 项行业奖项。实验室简介 实验室设施及业务概况 实验室建设 SIG SIG 地址：https:/ 钉钉群：“龙蜥-可信计算 SIG 技术交流群”，群号：15370024496 微信群：“龙蜥-可信计算 SIG 技术交流群”1.1.3.3 futureTPM 工作组与主要目标 2.国家标准化管理委员会 ISO/IEC 11889 系列标准 TSS 规范官网入口：https:/trustedcomputing

2、group.org/resource/tcg-software-stack-tss-specification/缩略语 PTP Platform TPM Profile CRB Command Response Buffer interface DDWG Device Drivers Writers Guide Certification PP Certification Protection Profile TIS TPM Interface Specification PC Client 标准及配套文档体系:缩略语 PFP Platform Firmware Profile PPI Phy

3、sical Presence Interface FIM Firmware Integrity Measurement MOR Reset Attack Mitigation Memory on reset attack mitigation RIM Reference Integrity Manifest DRTM Dynamic Root of Trust for Measurement 标准编制 应用场景 标准推广 3.swtpm swtpm libtpms 1.#安装依赖包 2.yum install-y automake autoconf libtool gcc gcc-c+make

4、 3.openssl-devel pkg-config socat net-tools-deprecated 4.libtasn1-devel gnutls gnutls-devel libseccomp-devel 5.json-glib-devel expect softhsm 6.#下载 libtpms 源码 7.git clone https:/ 8.cd libtpms 9.#编译并安装 libtpms 10./autogen.sh-prefix=/usr-libdir=/usr/lib64-with-openssl 11.-with-tpm2 12.13.make-j4 14.ma

5、ke-j4 check 15.sudo make install 16.#下载 swtpm 源码 17.git clone https:/ 18.cd swtpm 19.#编译并安装 swtpm 20./autogen.sh-prefix=/usr-libdir=/usr/lib64-with-openssl 21.-with-tss-user=root-with-tss-group=tss-with-cuse 22.make-j4 23.sudo make check-j4 24.sudo make install 1.yum install libtpms swtpm swtpm-deve

6、l swtpm-tools swtpm 编译。1.#安装内核 cuse 模块 2.yum install kernel-modules-extra 3.modprobe cuse 1.#1.初始 tpm2 state 2.mkdir/tmp/myvtpm0;3.chown R tss:root/tmp/myvtpm0 4.swtpm_setup tpm2 tpm-state/tmp/myvtpm0 5.6.#2.创建 tpm2 字符设备 7.export TPM_PATH=/tmp/myvtpm0 8.swtpm_cuse-tpm2-n tpm0 9.#3.启动 tpm 设备 10.swtpm