fTPM Implementation and Provisioning

[mehmetyusuf1414]

Hello there,

I have two questions regarding Jetson fTPM installation.

First, we are using a preconfigured Jetson Linux version based on R36.4.3, along with a custom carrier board rather than the original one used for Orin NX. I was unable to find the optee directory within our image files. As suggested in the official guidelines, I retrieved the optee directory by downloading a fresh BSP package. I understand that compatibility depends on our specific configuration, but I would like to know if you believe this approach could cause any conflicts.

My second question is about the FSKP package. According to the documentation, it is a partner release package. Is there any way to test the fTPM provisioning process without burning fuses or making permanent hardware changes? I would like to avoid risking any damage to our devices during initial testing.

Thank you for your time.

[KevinFFF]

Hi mehmetyusuf1414,

@mehmetyusuf1414

I was unable to find the optee directory within our image files.

Please download them from Driver Package (BSP) Sources.

@mehmetyusuf1414

but I would like to know if you believe this approach could cause any conflicts.

It should be also working on your custom carrier board. fTPM is SW implementation.

@mehmetyusuf1414

My second question is about the FSKP package. According to the documentation, it is a partner release package. Is there any way to test the fTPM provisioning process without burning fuses or making permanent hardware changes?

I think burning fuse is necessary in this use case.

May I know what’s your use case and requirement?

[KevinFFF]

For fTPM feature on Jetson, you can refer to Firmware TPM — NVIDIA Jetson Linux Developer Guide for details.

[mehmetyusuf1414]

Kevin, thank you for referring me to the guideline.

I have been following it to learn more about fTPM, but I assume that testing fTPM is not possible without burning the fuses—is that correct?

Thank you once again.

[KevinFFF]

Correct, burning the fuse is required to verify fTPM.

[mehmetyusuf1414]

I have one more small question,

The Official TPM 2.0 Reference Implementation (link) can be used to simulate fTPM Provisioning, right? This allows us to test the process safely I assume.

[KevinFFF]

We’ve not verified that locally, but it seems worth to try if you want to simulate TPM2.0.