Hello! I am having issues with TPM 2.0 on Linux in general, but I currently use Fedora so I’ll write it here. I am using Fedora 44 KDE (kernel version 7.1.3-200) on a Fujitsu Celsius H760 laptop and I am sure the laptop has TPM 2.0, and I think it worked properly on Windows
When searching for any tpm* file in /dev , I find nothing. During boot, the system tries to find a TPM device but it couldn’t so it reaches its 45 seconds timeout limit, and then after launching some another services, it tries to find TPM again and it just reaches its 45 seconds timeout limit
The output of “sudo dmesg | grep -i tpm” command is:
[ 0.000000] efi: SMBIOS=0x373fb000 ACPI 2.0=0x37ffe014 ESRT=0x3747c418 MOKvar=0x373da000 RNG=0x37fbbf98 TPMEventLog=0x37faf018
[ 0.000000] TPM Final Events table not present
[ 0.010740] ACPI: SSDT 0x0000000037FFA000 000534 (v01 Insyde TPMACPI 00001000 INTL 20130117)
[ 0.010744] ACPI: TPM2 0x0000000037FF9000 000034 (v03 FUJ PC 01230000 FUJ 00000001)
[ 0.010822] ACPI: Reserving TPM2 table memory at [mem 0x37ff9000-0x37ff9033]
[ 0.625464] tpm_crb_acpi MSFT0101:00: error -EBUSY: can’t request region for resource [mem 0x37f65000-0x37f6502f]
[ 0.625470] tpm_crb_acpi MSFT0101:00: probe with driver tpm_crb_acpi failed with error -16
[ 1.043159] ima: No TPM chip found, activating TPM-bypass!
[ 1.736014] systemd[1]: systemd 259.7-1.fc44 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +IPE +SMACK +SECCOMP -GCRYPT +GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 -IDN +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK +BTF +XKBCOMMON +UTMP +SYSVINIT +LIBARCHIVE)
[ 1.913575] systemd[1]: Expecting device dev-tpm0.device - /dev/tpm0…
[ 1.913582] systemd[1]: Expecting device dev-tpmrm0.device - /dev/tpmrm0…
[ 47.693874] systemd[1]: systemd 259.7-1.fc44 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +IPE +SMACK +SECCOMP -GCRYPT +GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 -IDN +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK +BTF +XKBCOMMON +UTMP +SYSVINIT +LIBARCHIVE)
[ 48.380059] systemd[1]: Expecting device dev-tpm0.device - /dev/tpm0…
[ 48.380095] systemd[1]: Expecting device dev-tpmrm0.device - /dev/tpmrm0…
As I understand, this indicates that the system sees there is TPM 2.0 but it can’t access it properly. The line with error -16 thingy apparently mostly occurs on devices with AMD CPUs, but I have an Intel CPU instead
“systemd-analyze has-tpm2” displays this:
partial
+firmware
-driver
+system
+subsystem
+libraries
+libtss2-esys.so.0
+libtss2-rc.so.0
+libtss2-mu.so.0
So, the command shows that the TPM 2.0 driver is missing? I guess yeah
Attempt to enable tpm2-abrmd service (straight after boot) shows this:
A dependency job for tpm2-abrmd.service failed. See ‘journalctl -xe’ for details.
“journalctl -xe” displays this:
░░ Defined-By: systemd
░░ Support: https[:]//lists[.]freedesktop[.]org/mailman/listinfo/systemd-devel
░░ Defined-By: systemd
░░ Support: https[:]//lists[.]freedesktop[.]org/mailman/listinfo/systemd-devel
░░
░░ The unit systemd-localed.service has successfully entered the ‘dead’ state.
июл 08 16:40:36 Palantir-surveillance-server audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-localed comm=“systemd” exe=“/usr/lib/systemd/systemd” hostname=? addr=? terminal=? res=success’p=UNLOAD
июл 08 16:40:42 Palantir-surveillance-server kalarm[4493]: Wake from suspend: using RTC (no CAP_WAKE_ALARM capability)
июл 08 16:40:42 Palantir-surveillance-server kdeconnectd[3234]: Missing CAP_NET_ADMIN permission. Cannot determine whether a found address is of random or public type.
июл 08 16:40:48 Palantir-surveillance-server systemd[1]: fprintd.service: Deactivated successfully.
░░ Subject: Unit succeeded
░░ Defined-By: systemd
░░ Support: https[:]//lists[.]freedesktop[.]org/mailman/listinfo/systemd-devel
░░
░░ The unit fprintd.service has successfully entered the ‘dead’ state.
июл 08 16:40:48 Palantir-surveillance-server audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=‘unit=fprintd comm=“systemd” exe=“/usr/lib/systemd/systemd” hostname=? addr=? terminal=? res=success’
июл 08 16:40:48 Palantir-surveillance-server audit: BPF prog-id=84 op=UNLOAD
июл 08 16:41:07 Palantir-surveillance-server systemd[1]: dev-tpm0.device: Job dev-tpm0.device/start timed out.
июл 08 16:41:07 Palantir-surveillance-server systemd[1]: Timed out waiting for device dev-tpm0.device - /dev/tpm0.
░░ Subject: Ошибка юнита dev-tpm0.device (“dev-tpm0.device” unit error)
░░ Defined-By: systemd
░░ Support: https[:]//lists[.]freedesktop[.]org/mailman/listinfo/systemd-devel
░░
░░ Произошел сбой юнита dev-tpm0.device. (“dev-tpm0.device” unit fail occured)
░░
░░ Результат: timeout. (Result: timeout)
июл 08 16:41:07 Palantir-surveillance-server systemd[1]: Dependency failed for tpm2-abrmd.service - TPM2 Access Broker and Resource Management Daemon.
░░ Subject: Ошибка юнита tpm2-abrmd.service (“tpm2-abrmd.service” unit error)
░░ Defined-By: systemd
░░ Support: https[:]//lists[.]freedesktop[.]org/mailman/listinfo/systemd-devel
░░
░░ Произошел сбой юнита tpm2-abrmd.service. (“tpm2-abrmd.service” unit fail occured)
░░
░░ Результат: dependency. (Result: dependency)
июл 08 16:41:07 Palantir-surveillance-server systemd[1]: tpm2-abrmd.service: Job tpm2-abrmd.service/start failed with result ‘dependency’.
июл 08 16:41:07 Palantir-surveillance-server systemd[1]: dev-tpm0.device: Job dev-tpm0.device/start failed with result ‘timeout’.
июл 08 16:41:07 Palantir-surveillance-server sudo[4420]: pam_unix(sudo:session): session closed for user root
июл 08 16:41:07 Palantir-surveillance-server audit[4420]: AUDIT1106 pid=4420 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct=“root” exe=“/usr/bin/sudo” hostname=Palantir-surveillance-server addr=? terminal=/dev/pts/1 res=succes>
июл 08 16:41:07 Palantir-surveillance-server audit[4420]: AUDIT1104 pid=4420 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg=‘op=PAM:setcred grantors=pam_unix acct=“root” exe=“/usr/bin/sudo” hostname=Palantir-surveillance-server addr=? terminal=/dev/pts/1 res=success’
июл 08 16:41:07 Palantir-surveillance-server systemd[1]: session-c2.scope: Deactivated successfully.
░░ Defined-By: systemd
░░ Support: https[:]//lists[.]freedesktop[.]org/mailman/listinfo/systemd-devel
░░
░░ The unit systemd-localed.service has successfully entered the ‘dead’ state.
июл 08 16:40:36 Palantir-surveillance-server audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=‘unit=systemd-localed comm=“systemd” exe=“/usr/lib/systemd/systemd” hostname=? addr=? terminal=? res=success’
июл 08 16:40:36 Palantir-surveillance-server audit: BPF prog-id=83 op=UNLOAD
июл 08 16:40:36 Palantir-surveillance-server audit: BPF prog-id=82 op=UNLOAD
июл 08 16:40:36 Palantir-surveillance-server audit: BPF prog-id=81 op=UNLOAD
июл 08 16:40:42 Palantir-surveillance-server kalarm[4493]: Wake from suspend: using RTC (no CAP_WAKE_ALARM capability)
июл 08 16:40:42 Palantir-surveillance-server kdeconnectd[3234]: Missing CAP_NET_ADMIN permission. Cannot determine whether a found address is of random or public type.
июл 08 16:40:48 Palantir-surveillance-server systemd[1]: fprintd.service: Deactivated successfully.
░░ Subject: Unit succeeded
░░ Defined-By: systemd
░░ Support: https[:]//lists[.]freedesktop[.]org/mailman/listinfo/systemd-devel
░░
░░ The unit fprintd.service has successfully entered the ‘dead’ state.
июл 08 16:40:48 Palantir-surveillance-server audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=‘unit=fprintd comm=“systemd” exe=“/usr/lib/systemd/systemd” hostname=? addr=? terminal=? res=success’
июл 08 16:40:48 Palantir-surveillance-server audit: BPF prog-id=84 op=UNLOAD
июл 08 16:41:07 Palantir-surveillance-server systemd[1]: dev-tpm0.device: Job dev-tpm0.device/start timed out.
июл 08 16:41:07 Palantir-surveillance-server systemd[1]: Timed out waiting for device dev-tpm0.device - /dev/tpm0.
░░ Subject: Ошибка юнита dev-tpm0.device (“dev-tpm0.device” unit error)
░░ Defined-By: systemd
░░ Support: https[:]//lists[.]freedesktop[.]org/mailman/listinfo/systemd-devel
░░
░░ Произошел сбой юнита dev-tpm0.device. (“dev-tpm0.device” unit fail occured)
░░
░░ Результат: timeout. (Result: timeout)
июл 08 16:41:07 Palantir-surveillance-server systemd[1]: Dependency failed for tpm2-abrmd.service - TPM2 Access Broker and Resource Management Daemon.
░░ Subject: Ошибка юнита tpm2-abrmd.service (“tpm2-abrmd” unit error)
░░ Defined-By: systemd
░░ Support: https[:]//lists[.]freedesktop[.]org/mailman/listinfo/systemd-devel
░░
░░ Произошел сбой юнита tpm2-abrmd.service. (“tpm2-abrmd.service” unit fail occured)
░░
░░ Результат: dependency. (Result: dependency)
июл 08 16:41:07 Palantir-surveillance-server systemd[1]: tpm2-abrmd.service: Job tpm2-abrmd.service/start failed with result ‘dependency’.
июл 08 16:41:07 Palantir-surveillance-server systemd[1]: dev-tpm0.device: Job dev-tpm0.device/start failed with result ‘timeout’.
июл 08 16:41:07 Palantir-surveillance-server sudo[4420]: pam_unix(sudo:session): session closed for user root
июл 08 16:41:07 Palantir-surveillance-server audit[4420]: AUDIT1106 pid=4420 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg=‘op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct=“root” exe=“/usr/bin/sudo” hostname=Palantir-surveillance-server addr=? terminal=/dev/pts/1 res=success’
июл 08 16:41:07 Palantir-surveillance-server audit[4420]: AUDIT1104 pid=4420 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg=‘op=PAM:setcred grantors=pam_unix acct=“root” exe=“/usr/bin/sudo” hostname=Palantir-surveillance-server addr=? terminal=/dev/pts/1 res=success’
июл 08 16:41:07 Palantir-surveillance-server systemd[1]: session-c2.scope: Deactivated successfully.
░░ Subject: Unit succeeded
░░ Defined-By: systemd
░░ Support: https[:]//lists[.]freedesktop[.]org/mailman/listinfo/systemd-devel
░░
░░ The unit session-c2.scope has successfully entered the ‘dead’ state.
июл 08 16:41:07 Palantir-surveillance-server systemd-logind[1115]: Session c2 logged out. Waiting for processes to exit.
июл 08 16:41:07 Palantir-surveillance-server systemd-logind[1115]: Removed session c2.
░░ Subject: Сеанс c2 завершен (“c2” session has ended)
░░ Defined-By: systemd
░░ Support: https[:]//lists[.]freedesktop[.]org/mailman/listinfo/systemd-devel
░░ Documentation: sd-login(3)
lines 2909-2960/2962 100%
Yes, I just pasted the output and added some translations
I just disabled TPM 2.0 in UEFI for a while but I realized I might want to eventually use it. Is there anything I can do about it?