Small program to temporary fix TPM state until we can do this in the BIOS.

utility/tpm_init_temp_fix.c

+/* Copyright (c) 2010 The Chromium OS Authors. All rights reserved.
+ * Use of this source code is governed by a BSD-style license that can be
+ * found in the LICENSE file.
+ *
+ * Temporary fix for running the TPM selftest and other essential
+ * intializations that we forgot to put in the BIOS.
+ *
+ * This works in a very specific situation: we assume TPM_Startup has been
+ * executed, but we don't know if the self test has run.  On a ST TPM version
+ * 1.2.7.0, GetCapabilities fails before the self test has run, so we use that
+ * to check if we need to run it.
+ *
+ * This also enables the TPM if it is disabled, and activates it if it is
+ * deactivated.
+ *
+ * Exit status: 0 for normal, 1 for errors (see syslog), 2 for normal but needs
+ * reboot.
+ */
+
+#include "tlcl.h"
+
+#include <syslog.h>
+
+int main(int argc, char* argv[]) {
+  uint32_t result;
+  uint8_t disable, deactivated;
+  int pri = LOG_USER | LOG_ERR;
+
+  TlclLibInit();
+  TlclStartup();        /* ignore result */
+  result = TlclGetFlags(NULL, NULL, NULL);
+  if (result != 0) {
+    result = TlclSelfTestFull();
+    if (result != 0) {
+      syslog(pri, "TPM selftest failed with code 0x%x\n", result);
+      return 1;
+    }
+  }
+  /* Optional one-time enabling of TPM. */
+  result = TlclAssertPhysicalPresence();
+  if (result != 0) {
+    syslog(pri, "TPM assertpp failed with code 0x%x\n", result);
+    return 1;
+  }
+  result = TlclGetFlags(&disable, &deactivated, NULL);
+  if (result != 0) {
+    syslog(pri, "TPM getflags failed with code 0x%x\n", result);
+    return 1;
+  }
+  if (disable) {
+    result = TlclSetEnable();
+    if (result != 0) {
+      syslog(pri, "TPM physical enable failed with code 0x%x\n", result);
+      return 1;
+    }
+  }
+  if (deactivated) {
+    result = TlclSetDeactivated(0);
+    if (result != 0) {
+      syslog(pri, "TPM physical activate failed with code 0x%x\n", result);
+      return 1;
+    }
+    return 2; /* needs reboot */
+  }
+  return 0;
+}