Create a Trusted Application for the Orin Nano that reads and extends the tpm

Robotics & Edge Computing Jetson & Embedded Systems Jetson Orin Nano
,
1

Hello everyone,

I’ve successfully set up JetPack SDK on my Jetson Orin Nano, flashed it with a Custom Kernel and set up OP-TEE along with Disk Encryption. OP-TEE is running fine, and I’ve already tested several Trusted Applications such as the hello world or hwkey agent sample from NVIDIA’s documentation..

Now I’m working on a Trusted Application that should interact with the TPM module on the Jetson.

From the Linux terminal on the Jetson, I can run commands like tpm2_pcrread, tpm2_pcrextend, and tpm2_selftest successfully — so the TPM and tpm2-tools are working as expected in normal world.

What I want to do now is:

  • Access the TPM directly from within the Trusted Application, without relying on Linux-side tooling (because it is not working there)
  • Ideally perform a PCR Extend operation via the TA

Thanks in advance!

3

hello nik01flink,

you may try below, which check PCR to confirm whether measured boot is active.
$ sudo modprobe tpm_ftpm_tee
$ sudo tpm2_pcrread

5

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.