tboot bkm

Tboot BKM.

 

1.       Enable bios.

Bios à Security àsystem Security->

Data Execution Prevention    Enabled

Intel TXTSupport           Enabled

 

2.       download tboot source code

http://sourceforge.net/projects/tboot/

  or

   hg clone http://www.bughost.org/repos.hg/tboot.hg

 

 ####

zypper  install trousers-devel

/etc/init.d/tcsd start

####

3.       compile and install TBOOT

~/tboot

 

Make

Make install

 

4.       download sinit.bin

http://software.intel.com/en-us/articles/intel-trusted-execution-technology/

 

check CPU type and download necessarysinit.bin

check CPU type:  cat /proc/cpuinfo | grep "modelname"

 

5.       grub

 

titleTboot

   root (hd0,1)

   kernel /boot/tboot.gz logging=serial,vga,memory

   module /boot/xen.gz vga=mode-0x314

   module /boot/vmlinuz-3.1.0-1.2-xenroot=/dev/disk/by-id/ata-ST31000524AS_5VP9V1F2-part2resume=/dev/disk/by-id/ata-ST31000524AS_5VP9V1F2-part1 splash=silent quietshowopts vga=0x314

   module /boot/initrd-3.1.0-1.2-xen

        module /boot/sinit.bin

 

6.       verified launch

txt-stat

 

***********************************************************

        TXT measured launch: TRUE

        secrets flag set: TRUE

***********************************************************

 

TXT measured launch: TRUE à tboot launchsuccessfully.