Unsolved
This post is more than 5 years old
1 Rookie
•
2 Posts
0
2724
November 9th, 2017 22:00
Dell PowerEdge R430 - change TPM 2.0 to 1.2
Hi all,
is there any chance to change newer TPM 2.0 chip to older one (TPM 1.2) in this server? We have incorrectly selected a new version of TPM (2.0) that is not supported by security tools such as TrustedGRUB2, tpm-tools and tpm-luks.
Many thanks for the replies!
Best regards,
Tomas Plesnik
DELL-Chris H
Moderator
•
9.7K Posts
0
November 10th, 2017 06:00
Tomas Plesnik,
The TPM is bound to the systemboard upon install. So any attempt to remove an installed TPM plug-in module breaks the cryptographic binding, and it cannot be re-installed or installed on another motherboard.
The part number for the 1.2 is 4DP35
Let me know if this helps.
Tomas Plesnik
1 Rookie
•
2 Posts
0
November 10th, 2017 08:00
Dear Chris,
first of all I’d like to thank you for your reply and for obtaining the part number of TPM 1.2 module.
My first question is if it would be possible to switch TPM 2.0 to behave as TPM 1.2 without replacing the TPM 2.0 module currently installed? If not, I have a second question for you. In our case we expect that currently installed TPM 2.0 module will be unusable and the second question is if we are able to buy, install and use TPM 1.2 module in this server?
Best regards,
Tomas
blazingforests
1 Rookie
•
8 Posts
0
September 29th, 2018 03:00
Hi, @Tomas Plesnik
I am also trying to use TPM with LUKS to encrypt the whole disk.
I tried TrustedGRUB2, but failed.
Detail https://github.com/fox-it/linux-luks-tpm-boot/issues/22
Then I tried tpm-luks, also failed.
Detail https://github.com/zajdee/tpm-luks/issues/4
Could you tell me, which method you are using?
Thank you very much.