1 What: /sys/class/tpm/tpmX/device/
2 Date: April 2005
3 KernelVersion: 2.6.12
4 Contact: linux-integrity@vger.kernel.or
5 Description: The device/ directory under a
6 the properties of that TPM chi
7
8
9 What: /sys/class/tpm/tpmX/device/act
10 Date: April 2006
11 KernelVersion: 2.6.17
12 Contact: linux-integrity@vger.kernel.or
13 Description: The "active" property prints a
14 commands. An inactive TPM chip
15 an active chip (Storage Root K
16 visible to the OS, but will on
17 commands. See the TPM Main Spe
18 section 17 for more informatio
19 available.
20
21 What: /sys/class/tpm/tpmX/device/can
22 Date: June 2005
23 KernelVersion: 2.6.13
24 Contact: linux-integrity@vger.kernel.or
25 Description: The "cancel" property allows y
26 pending TPM command. Writing a
27 TPM vendor specific cancel ope
28
29 What: /sys/class/tpm/tpmX/device/cap
30 Date: April 2005
31 KernelVersion: 2.6.12
32 Contact: linux-integrity@vger.kernel.or
33 Description: The "caps" property contains T
34
35 Example output::
36
37 Manufacturer: 0x53544d20
38 TCG version: 1.2
39 Firmware version: 8.16
40
41 Manufacturer is a hex dump of
42 space in a TPM. TCG version sh
43 the chip supports. Firmware ve
44 is manufacturer specific.
45
46 What: /sys/class/tpm/tpmX/device/dur
47 Date: March 2011
48 KernelVersion: 3.1
49 Contact: linux-integrity@vger.kernel.or
50 Description: The "durations" property shows
51 used to wait for a short, medi
52 TPM commands are categorized a
53 execution time, so that the dr
54 any longer than necessary befo
55 result.
56
57 Example output::
58
59 3015000 4508000 180995000 [o
60
61 Here the short, medium and lon
62 usecs. "[original]" indicates
63 unmodified from when they were
64 Durations can be modified in t
65 reports them in msec instead o
66 scaled to be displayed in usec
67 will be displayed in place of
68
69 What: /sys/class/tpm/tpmX/device/ena
70 Date: April 2006
71 KernelVersion: 2.6.17
72 Contact: linux-integrity@vger.kernel.or
73 Description: The "enabled" property prints
74 meaning that it should be visi
75 may be visible but produce a '
76 disables the TPM.
77
78 What: /sys/class/tpm/tpmX/device/own
79 Date: April 2006
80 KernelVersion: 2.6.17
81 Contact: linux-integrity@vger.kernel.or
82 Description: The "owned" property produces
83 ordinal has been executed succ
84 indicates that ownership hasn'
85
86 What: /sys/class/tpm/tpmX/device/pcr
87 Date: April 2005
88 KernelVersion: 2.6.12
89 Contact: linux-integrity@vger.kernel.or
90 Description: The "pcrs" property will dump
91 Configuration Registers in the
92 values may be constantly chang
93 for a snapshot in time.
94
95 Example output::
96
97 PCR-00: 3A 3F 78 0F 11 A4 B4
98 PCR-01: 3A 3F 78 0F 11 A4 B4
99 PCR-02: 3A 3F 78 0F 11 A4 B4
100 PCR-03: 3A 3F 78 0F 11 A4 B4
101 PCR-04: 3A 3F 78 0F 11 A4 B4
102 ...
103
104 The number of PCRs and hex byt
105 value will vary depending on T
106 1.2 chips, PCRs represent SHA-
107 long. Use the "caps" property
108
109 What: /sys/class/tpm/tpmX/device/pub
110 Date: April 2005
111 KernelVersion: 2.6.12
112 Contact: linux-integrity@vger.kernel.or
113 Description: The "pubek" property will retu
114 key if possible. If the TPM ha
115 is version 1.2, the pubek will
116 owner's authorization. Since t
117 secrets, it can't authorize it
118 making it unaccessible. The pu
119 ated at TPM manufacture time a
120 chip.
121
122 Example output::
123
124 Algorithm: 00 00 00 01
125 Encscheme: 00 03
126 Sigscheme: 00 01
127 Parameters: 00 00 08 00 00 0
128 Modulus length: 256
129 Modulus:
130 B4 76 41 82 C9 20 2C 10 18 4
131 3A B2 92 0C A4 9B 2A 83 EB 5
132 1E E4 81 84 CE B2 F2 45 1C F
133 86 C4 F7 F3 29 60 52 93 6B B
134 D7 0E 7D CA 41 BF 43 07 65 8
135 82 5E 96 0B F8 1F 5F 34 06 D
136 0F F4 04 4B D9 3F 2D F2 AC 2
137 1E 30 38 6C 70 63 69 AB E2 5
138 6F 78 44 DA 57 43 69 EE 76 6
139 A7 1F 3C A8 D0 12 15 3E CA 0
140 47 AE A4 18 83 8E 22 39 75 9
141 10 AD 94 14 65 F9 6A 17 78 B
142 E0 DC 65 FD 3C C6 B0 1E BF B
143 F8 28 05 83 62 26 11 DC B4 6
144 F7 02 71 CF 15 AE 16 DD D1 C
145 C3 91 FF 44 1E CF 7C 39 FE 1
146
147 Possible values::
148
149 Algorithm: TPM_ALG_RSA
150 Encscheme: TPM_ES_RSAESPK
151 TPM_ES_RSAESOA
152 Sigscheme: TPM_SS_NONE
153 Parameters, a byte string of
154 Key Length (bits):
155 Num primes:
156 Exponent Size:
157
158 Modulus Length: 256 (bytes)
159 Modulus: The 256 byte E
160
161 What: /sys/class/tpm/tpmX/device/tem
162 Date: April 2006
163 KernelVersion: 2.6.17
164 Contact: linux-integrity@vger.kernel.or
165 Description: The "temp_deactivated" propert
166 been temporarily deactivated,
167 cycle. Whether a warm boot (re
168 from a temp_deactivated state
169
170 What: /sys/class/tpm/tpmX/device/tim
171 Date: March 2011
172 KernelVersion: 3.1
173 Contact: linux-integrity@vger.kernel.or
174 Description: The "timeouts" property shows
175 for the TPM's interface spec t
176 timeouts is defined by the TPM
177 conforms to.
178
179 Example output::
180
181 750000 750000 750000 750000
182
183 The four timeout values are sh
184 "[original]" or "[adjusted]" d
185 were scaled by the driver to b
186
187 What: /sys/class/tpm/tpmX/tpm_versio
188 Date: October 2019
189 KernelVersion: 5.5
190 Contact: linux-integrity@vger.kernel.or
191 Description: The "tpm_version_major" proper
192 implemented by the TPM device.
193
194 Example output::
195
196 2
197
198 What: /sys/class/tpm/tpmX/pcr-<H>/<N
199 Date: March 2021
200 KernelVersion: 5.12
201 Contact: linux-integrity@vger.kernel.or
202 Description: produces output in compact hex
203 number N from hash bank H. N
204 the PCR number and H is the cr
205 representation of the hash
206
207 Example output::
208
209 cat /sys/class/tpm/tpm0/pcr-
210 2ED93F199692DC6788EFA6A1FE74
Linux® is a registered trademark of Linus Torvalds in the United States and other countries.
TOMOYO® is a registered trademark of NTT DATA CORPORATION.