tpm2-software/tpm2-tss

NVram with sensitive data

JordanLBogdanov opened this issue · 4 comments

JordanLBogdanov commented

I have 2 questions about writing sensitive data in the TPM's NVRAM :

  • Can the data be extracted?
  • When is the data permanently lost?
JuergenReppSIT commented
  • Sensitive data stored in NVRAM should be protected by passwords or extended authorization (EA) policies.
  • The data will be lost after executing TPM2_Clear or TPM2_NV_UndefineSpace
JordanLBogdanov commented

@JuergenReppSIT is TPM2_Clear equal to BIOS NVram Clear procedure?

JuergenReppSIT commented

@JordanLBogdanov you should check the technical info of your BIOS what's exactly the functionality of "BIOS NVram Clear".

JordanLBogdanov commented

Thank you.