diff --git a/draft/boards/letstrust-tpm.png b/draft/boards/letstrust-tpm.png new file mode 100644 index 0000000..dc2a636 Binary files /dev/null and b/draft/boards/letstrust-tpm.png differ diff --git a/draft/overlay/letstrust-tpm.md b/draft/overlay/letstrust-tpm.md new file mode 100644 index 0000000..ca63970 --- /dev/null +++ b/draft/overlay/letstrust-tpm.md @@ -0,0 +1,67 @@ + +#LetsTrust-TPM + +LetsTrust-TPM is a TPM2.0 daughter board for the Raspberry Pi platform based on an Infineon SLB9670 chip. +It is compatible with all Raspberry Pi models and probably the smallest available addon board on the market. +The TPM can be used e.g. as a secure keystore or as an hwrng. + +In order to use it your kernel must have the following options enabled: +```kernelconfig + CONFIG_HW_RANDOM_TPM=m + CONFIG_TCG_TPM=m + CONFIG_TCG_TIS_CORE=m + CONFIG_TCG_TIS_SPI=m + CONFIG_SECURITYFS=y +``` +and a suitable device tree overlay: +```dts + slb9670: slb9670@0{ + compatible = "infineon,slb9670"; + reg = <1>; /* CE1 */ + #address-cells = <1>; + #size-cells = <0>; + spi-max-frequency = <32000000>; + status = "okay"; + }; +``` + +Per default CE1 is used as chip select, CE0 can also be used by resoldering a 0-ohm resistor. + +A full dts overlay is available here, +or you can also find a precompiled image with TPM support and the complete build-instructions at letstrust.de.