tpm: add manufacturing status check

For now the presence of both RSA and EC certificates at fixed NVRAM
indices is considered evidence of TPM being through manufacturing.

BRANCH=none
BUG=chrome-os-partner:50645
TEST=with the rest of the patches applied TPM manufacturing status is
     properly detected at startup.

Change-Id: Iff3861603272cdfb58ebc523458c114685b2429f
Signed-off-by: Vadim Bendebury <vbendeb@chromium.org>
Reviewed-on: https://chromium-review.googlesource.com/362351
Reviewed-by: Marius Schilder <mschilder@chromium.org>
This commit is contained in:
Vadim Bendebury
2016-07-21 07:14:12 -07:00
committed by chrome-bot
parent 68244c3f4e
commit 9b752cbcd4
3 changed files with 61 additions and 0 deletions

17
include/tpm_manufacture.h Normal file
View File

@@ -0,0 +1,17 @@
/* Copyright 2016 The Chromium OS Authors. All rights reserved.
* Use of this source code is governed by a BSD-style license that can be
* found in the LICENSE file.
*/
/*
* This header declares the TPM manufacture related interface.
* Individual boards are expected to provide implementations.
*/
#ifndef __CROS_EC_TPM_MANUFACTURE_H
#define __CROS_EC_TPM_MANUFACTURE_H
/* Returns non-zero if the TPM manufacture steps have been completed. */
int tpm_manufactured(void);
#endif /* __CROS_EC_TPM_MANUFACTURE_H */