0

I've also checked with systemd-analyze pcrs if PCRs are the same at every reboot, and they are.

Only at first reboot I don't know why the only PCRs that change are 8,9,10 lol(I don't know why)... but in next reboots they are always the same, so it shouldn't prompt me the decryption disk password.

Improve this question
4
  • 1
    What events does the TCG event log contain within those PCRs? Their values at the time of early boot might not necessarily be the same as after the boot has finished.
    – u1686_grawity
    Nov 16 at 21:17
  • What is your motherboard model? Some don't actually measure BIOS settings, or need that enabled like: dell.com/support/manuals/en-us/virtual-edge-platform-4600-8c/…
    – Cpt.Whale
    Nov 16 at 21:37
  • @Cpt.Whale motherboard HP 89FC, bios version AMI F.16
    – Allexj
    Nov 17 at 8:47
  • @u1686_grawity what should I check via sudo tpm2_eventlog /sys/kernel/security/tpm0/binary_bios_measurements ? I don't have it clear
    – Allexj
    Nov 17 at 8:55

0

Reset to default

You must log in to answer this question.

Browse other questions tagged .