converged-security-suite

Intel TXT Validation Test Suite

This Golang utility tests whether the platform supports Intel TXT and FIT, TPM boot chain has been configured correctly.

The suite is work in progress.

Usage

The test suite runs on GNU/Linux. The /dev/mem device must allow access to the full physical memory. You may have to add the following to the kernel command line:

iomem=relaxed strict-devmem=0 mem.devmem=1

Prepare the environment:

Load the msr kernel module:

modprobe msr

If /dev/tpm0 doesn't exist, load the TPM kernel module:

modprobe tpm_tis

Stop the tpm2-abrmd.service if running:

systemctl stop tpm2-abrmd.service

The only dependency is a working Go toolchain and the dep tool. After cloning the repository, fetch the dependencies:

dep ensure

Then, run the test suite as root.

go run cmd/txt-suite/main.go

Commandline arguments

-l : Lists all tests
-i : Enforces testing, so they won't stop at the first error
-t=<n,m,o> : Choose tests, seperated by comma
-t=<n-m> or -t=<n-m,o-p> : Choose ranges of tests, can be seperated by comma
-v : Gives information about Licence, Copyright and Version
-h : Shows this information

Tests

The test suite implements the following tests.