tpm: Allow disabling platform hierarchy with TPM2
authorSimon Glass <sjg@chromium.org>
Sat, 6 Feb 2021 21:23:42 +0000 (14:23 -0700)
committerTom Rini <trini@konsulko.com>
Tue, 2 Mar 2021 20:53:37 +0000 (15:53 -0500)
commit63af92e837f3d7c21ab5fc4a96ffcbf202efaf90
tree6cef337796d50552504a3f0b90e07d32d2d88190
parent7785bc1d5f94d28497bef6935ecbaa1b0ddd3e26
tpm: Allow disabling platform hierarchy with TPM2

With TPM2 we don't actually lock the TPM once verified boot is finished.
Instead we disable the platform hierarchy which serves the same purpose.
Add an implementation of this so we can safely boot into the kernel.

Signed-off-by: Simon Glass <sjg@chromium.org>
Acked-by: Ilias Apalodimas <ilias.apalodimas@linaro.org>
include/tpm-v2.h
lib/tpm-v2.c