Check the TPM measurement if TPM is present
Perform the TPM Measurement Check only if TPM is present. This commit
adds a new option to provide the sysfs TPM device tree path, which will
be used to verify TPM's presence. If the device tree path doesn't exist,
it indicates that TPM is not present.
Tested: Tested on a system with TPM device present and on system that
didn't have it present and verified expected behavior on both.
Change-Id: I108f05cc5bafd90cda5a82146b93e2371765b9aa
Signed-off-by: Lakshmi Yadlapati <lakshmiy@us.ibm.com>
diff --git a/secure_boot_check.cpp b/secure_boot_check.cpp
index edbd8ff..b9ad361 100644
--- a/secure_boot_check.cpp
+++ b/secure_boot_check.cpp
@@ -188,8 +188,11 @@
}
}
- // Check the TPM measurement
- checkTpmMeasurement();
+ // Check the TPM measurement if TPM is enabled
+ if (std::filesystem::exists(std::string(SYSFS_TPM_DEVICE_PATH)))
+ {
+ checkTpmMeasurement();
+ }
return 0;
}