x86: Cómo inicializar TPM mediante BIOS

En sistemas x86, realiza pasos en el BIOS del sistema antes de inicializar el servicio mediante Oracle Solaris.

1. En el indicador Oracle Solaris, reinicie el sistema.

    # reboot -p

2. Durante el inicio del sistema, presione F2 para acceder al menú del BIOS.
3. Mediante las opciones del menú del BIOS, configure TPM.
   1. Vaya a Advanced (Avanzado) → Trusted Computing (Computación de confianza).
   2. Defina TPM especificando valores para los siguientes elementos del menú.

      TCG/TPM Support [Yes]
      Execute TPM Command [Enabled]

   3. Presione la tecla ESC para salir del menú del BIOS.
   4. Elija guardar los cambios y salir.
   5. Para continuar con el proceso de inicio, seleccione OK (Aceptar).
4. Después de que el proceso de inicio finalice, active el daemon tcsd.

   # svcadm enable -s svc:/application/security/tcsd

5. Inicialice TPM.

   La inicialización de TPM hace que se convierta en un propietario de TPM y requiere que asigne una contraseña de propietario.

   # tpmadm init
   TPM Owner PIN:
   Confirm TPM Owner PIN

6. Verifique el estado de TPM.

    # tpmadm status
   TPM Version: 1.2 (ATML Rev: 13.9, SpecLevel: 2, ErrataRev: 1)
   TPM resources
   Contexts: 16/16 available
   Sessions: 2/3 available
   Auth Sessions: 2/3 available
   Loaded Keys: 18/21 available
   Platform Configuration Registers (24)
   PCR 0: E1 EE 40 D8 66 28 A9 08 B6 22 8E AF DC 3C BC 23 71 15 49 31
   PCR 1: 5B 93 BB A0 A6 64 A7 10 52 59 4A 70 95 B2 07 75 77 03 45 0B
   PCR 2: 5B 93 BB A0 A6 64 A7 10 52 59 4A 70 95 B2 07 75 77 03 45 0B
   PCR 3: 5B 93 BB A0 A6 64 A7 10 52 59 4A 70 95 B2 07 75 77 03 45 0B
   PCR 4: AF 98 77 B8 72 82 94 7D BE 09 25 10 2E 60 F9 60 80 1E E6 7C
   PCR 5: E1 AA 8C DF 53 A4 23 BF DB 2F 4F 0F F2 90 A5 45 21 D8 BF 27
   PCR 6: 5B 93 BB A0 A6 64 A7 10 52 59 4A 70 95 B2 07 75 77 03 45 0B
   PCR 7: 5B 93 BB A0 A6 64 A7 10 52 59 4A 70 95 B2 07 75 77 03 45 0B
   PCR 8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
   PCR 9: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
   PCR 10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
   PCR 11: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
   PCR 12: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
   PCR 13: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
   PCR 14: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
   PCR 15: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
   PCR 16: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
   PCR 17: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
   PCR 18: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
   PCR 19: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
   PCR 20: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
   PCR 21: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
   PCR 22: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
   PCR 23: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
   

7. (Opcional) Active el proveedor de cifrado de TPM.

   ---

   Notas -  El proveedor de cifrado de TPM es más lento que Oracle Solaris. Por lo tanto, realice este paso sólo si desea que TPM realice operaciones criptográficas.

   ---

   # cryptoadm install provider='/usr/lib/security/$ISA/pkcs11_tpm.so'
   # cryptoadm list -mv provider='/usr/lib/security/$ISA/pkcs11_tpm.so'