Linux kernel mirror (for testing) git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel os linux

docs: document DCP-backed trusted keys kernel params

Document the kernel parameters trusted.dcp_use_otp_key
and trusted.dcp_skip_zk_test for DCP-backed trusted keys.

Co-developed-by: Richard Weinberger <richard@nod.at>
Signed-off-by: Richard Weinberger <richard@nod.at>
Co-developed-by: David Oberhollenzer <david.oberhollenzer@sigma-star.at>
Signed-off-by: David Oberhollenzer <david.oberhollenzer@sigma-star.at>
Signed-off-by: David Gstir <david@sigma-star.at>
Reviewed-by: Jarkko Sakkinen <jarkko@kernel.org>
Signed-off-by: Jarkko Sakkinen <jarkko@kernel.org>

authored by

David Gstir and committed by
Jarkko Sakkinen
b85b253e df866688

+13
+13
Documentation/admin-guide/kernel-parameters.txt
··· 6749 6749 - "tpm" 6750 6750 - "tee" 6751 6751 - "caam" 6752 + - "dcp" 6752 6753 If not specified then it defaults to iterating through 6753 6754 the trust source list starting with TPM and assigns the 6754 6755 first trust source as a backend which is initialized ··· 6764 6763 - "default" 6765 6764 If not specified, "default" is used. In this case, 6766 6765 the RNG's choice is left to each individual trust source. 6766 + 6767 + trusted.dcp_use_otp_key 6768 + This is intended to be used in combination with 6769 + trusted.source=dcp and will select the DCP OTP key 6770 + instead of the DCP UNIQUE key blob encryption. 6771 + 6772 + trusted.dcp_skip_zk_test 6773 + This is intended to be used in combination with 6774 + trusted.source=dcp and will disable the check if the 6775 + blob key is all zeros. This is helpful for situations where 6776 + having this key zero'ed is acceptable. E.g. in testing 6777 + scenarios. 6767 6778 6768 6779 tsc= Disable clocksource stability checks for TSC. 6769 6780 Format: <string>