TCG Software Stack
NAME¶
tcsd.conf - configuration file for the trousers TCS daemon.
DESCRIPTION¶
This file, by default
/etc/tcsd.conf is read by the trousers TCSD daemon,
tcsd (see
tcsd(8)). The tcsd.conf file that is installed by trousers contains
all the default options, commented out.
OPTIONS¶
port The port that TCSD will listen on for connections, local and remote,
from applications.
num_threads The maximum number of threads that the TCSD will spawn
simultaneously to service applications. After
num_threads threads have
been spawned, any application that attempts to connect to the TCSD will
receive an error.
system_ps_file The location of the system persistent storage file. The
system persistent storage file holds keys and data across restarts of the TCSD
and system reboots.
firmware_log_file Path to the file containing the current firmware PCR
event log data. The interface to this log is usually provided by the TPM
device driver.
kernel_log_file Path to the file containing the current kernel PCR event
log data. By default, this data will be parsed in the format provided by the
Integrity Measurement Architecture LSM.
firmware_pcrs A list of PCR indices that are manipulated only by the
system firmware and therefore are not extended or logged by the TCSD.
Applications that call Tcsi_PcrExtend on PCRs listed here will receive an
error.
kernel_pcrs A list of PCR indices that are manipulated only by the kernel
and therefore are not extended or logged by the TCSD. Applications that call
Tcsi_PcrExtend on PCRs listed here will receive an error.
platform_cred Path to the platform credential for your TPM. Your TPM
manufacturer may have provided you with a set of credentials (certificates)
that should be used when creating identities using your TPM. When a user of
your TPM makes an identity, this credential will be encrypted as part of that
process. See the 1.1b TPM Main specification section 9.3 for information on
this process.
conformance_cred Path to the conformance credential for your TPM. Your
TPM manufacturer may have provided you with a set of credentials
(certificates) that should be used when creating identities using your TPM.
When a user of your TPM makes an identity, this credential will be encrypted
as part of that process. See the 1.1b TPM Main specification section 9.3 for
information on this process.
endorsement_cred Path to the endorsement credential for your TPM. Your
TPM manufacturer may have provided you with a set of credentials
(certificates) that should be used when creating identities using your TPM.
When a user of your TPM makes an identity, this credential will be encrypted
as part of that process. See the 1.1b TPM Main specification section 9.3 for
information on this process.
remote_ops A list of TCS commands which will be allowed to be executed on
this machine's TCSD by TSP's on non-local hosts (over the internet). By
default, access to all operations is denied.
host_platform_class Determines the TCG specification of the host's
platform class. This refers to one of the specifications contained in the TCG
web site. The default is PC specification version 1.2 .
all_platform_classes Specifies all the TCG defined platforms associated
with the host platform. The host_platform_class must not be defined here. By
default, all platforms but the host platform are associated.
EXAMPLE¶
-
port = 30003
num_threads = 10
system_ps_file = /usr/local/var/tpm/system.data
firmware_log_file = /proc/tpm/firmware_events
kernel_log_file = /proc/tcg/measurement_events
firmware_pcrs = 0,1,2,3,4,5,6,7
kernel_pcrs = 10,11
platform_cred = /usr/local/var/lib/tpm/platform.cert
conformance_cred = /usr/local/var/lib/tpm/conformance.cert
endorsement_cred = /usr/local/var/lib/tpm/endorsement.cert
remote_ops = create_key,random
host_platform_class = server_12
all_platform_classes = pc_11,pc_12,mobile_12
SEE ALSO¶
tcsd(8)
AUTHOR¶
Kent Yoder
REPORTING BUGS¶
Report bugs to <trousers-tech@lists.sf.net>