security/tpm/xen-tpmfront.rst

12 ------------
21 the chain of trust rooted in the hardware TPM to virtual machines in Xen. Each
24 mini-os to reduce memory and processor overhead.
26 This mini-os vTPM subsystem was built on top of the previous vTPM work done by
31 ---------------
35   +------------------+
39   |   xen-tpmfront   |
40   +------------------+
43   +------------------+
44   | mini-os/tpmback  |
47   |  vtpm-stubdom    | ...
50   | mini-os/tpmfront |
51   +------------------+
54   +------------------+
55   | mini-os/tpmback  |
58   | vtpmmgr-stubdom  |
61   | mini-os/tpm_tis  |
62   +------------------+
65   +------------------+
66   |   Hardware TPM   |
67   +------------------+
73 * xen-tpmfront.ko:
75                     provides vTPM access to a Linux-based DomU.
77 * mini-os/tpmback:
78 		    Mini-os TPM backend driver. The Linux frontend driver
81 		    used by vtpmmgr-stubdom to communicate with vtpm-stubdom.
83 * vtpm-stubdom:
84 		 A mini-os stub domain that implements a vTPM. There is a
85 		 one to one mapping between running vtpm-stubdom instances and
89 * mini-os/tpmfront:
90 		     Mini-os TPM frontend driver. The vTPM mini-os domain
91 		     vtpm-stubdom uses this driver to communicate with
92 		     vtpmmgr-stubdom. This driver is also used in mini-os
93 		     domains such as pv-grub that talk to the vTPM domain.
95 * vtpmmgr-stubdom:
96 		    A mini-os domain that implements the vTPM manager. There is
102 * mini-os/tpm_tis:
103 		    Mini-os TPM version 1.2 TPM Interface Specification (TIS)
104                     driver. This driver used by vtpmmgr-stubdom to talk directly to
105                     the hardware TPM. Communication is facilitated by mapping
106                     hardware memory pages into vtpmmgr-stubdom.
108 * Hardware TPM:
113 --------------------
116 4.3.  See the Xen documentation (docs/misc/vtpm.txt) for details on setting up
122 the initrd, the xen-tpmfront driver must be compiled in to the kernel.  If not