From 631265b7e9c447412d423ffed1b39dfd706054cd Mon Sep 17 00:00:00 2001 From: Peter Jones Date: Tue, 1 Aug 2017 12:54:25 -0400 Subject: Add README.tpm to explain which PCRs we extend things to. Signed-off-by: Peter Jones --- README | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'README') diff --git a/README b/README index 24a39df1..bfc2d5cf 100644 --- a/README +++ b/README @@ -12,5 +12,9 @@ in the shim.h header file and provides a single entry point. On 64-bit systems this entry point expects to be called with SysV ABI rather than MSABI, and so calls to it should not be wrapped. +On systems with a TPM chip enabled and supported by the system firmware, +shim will extend various PCRs with the digests of the targets it is +loading. A full list is in the file README.tpm . + To use shim, simply place a DER-encoded public certificate in a file such as pub.cer and build with "make VENDOR_CERT_FILE=pub.cer". -- cgit v1.2.3