[Bug 1848892] Re: "error: Unknown TPM error." after upgrading to grub 2.04

Mark Rijckenberg 1848892 at bugs.launchpad.net
Tue Oct 22 11:57:47 UTC 2019 

I have followed this troubleshooting procedure:

1) Booted to Windows 10 to install newest tpm firmware for my HP EliteBook 820 G4
 laptop using HP TPM Configuration Utility.
2) Booted  to Ubuntu 19.10 (kernel 5.3.0-18-generic) with Secureboot enabled and TPM disabled
3) Purged and uninstalled all grub* packages (Yes, I know, pretty dangerous :-)
4) Only reinstalled following grub packages

~>apt list --installed|grep grub

WARNING: apt does not have a stable CLI interface. Use with caution in
scripts.

grub-common/eoan,now 2.04-1ubuntu12 amd64 [installed,automatic]
grub-customizer/eoan,now 5.1.0-1 amd64 [installed]
grub-efi-amd64-bin/eoan,now 2.04-1ubuntu12 amd64 [installed,automatic]
grub-efi-amd64-signed/eoan,now 1.128+2.04-1ubuntu12 amd64 [installed]
grub-gfxpayload-lists/eoan,now 0.7 amd64 [installed,automatic]
grub-pc-bin/eoan,now 2.04-1ubuntu12 amd64 [installed,automatic]
grub-pc/eoan,now 2.04-1ubuntu12 amd64 [installed,automatic]
grub2-common/eoan,now 2.04-1ubuntu12 amd64 [installed]
grub2-splashimages/eoan,eoan,now 1.0.1+nmu1 all [installed]
grub2-themes-ubuntu-mate/eoan,eoan,now 0.3.7 all [installed]
grub2-themes-ubuntustudio/eoan,eoan,now 0.2 all [installed]
grub2/eoan,now 2.04-1ubuntu12 amd64 [installed]

5) Ran sudo  update-grub2
6) Updated Ubuntu kernel to signed kernel version 5.3.0-19-generic

7) In UEFI, disabled SecureBoot and enabled TPM 2.0.

8) Successfully rebooted into Ubuntu 19.10 with TPM 2.0 enabled and
SecureBoot disabled

~>dmesg | grep -i tpm
[    0.000000] efi:  ACPI=0xd9ffe000  ACPI 2.0=0xd9ffe014  TPMFinalLog=0xd9f76000  SMBIOS=0xd9765000  SMBIOS 3.0=0xd9763000  MEMATTR=0xd5f3c018  ESRT=0xd9766b18  
[    0.016058] ACPI: SSDT 0x00000000D9FEC000 0003B3 (v02 HPQOEM Tpm2Tabl 00001000 INTL 20160422)
[    0.016061] ACPI: TPM2 0x00000000D9FEB000 000034 (v03 HPQOEM EDK2     00000002      01000013)
[    4.129890] tpm_tis MSFT0101:00: 2.0 TPM (device-id 0x1B, rev-id 16)
~> uname -a
HP-EliteBook-820-G4 5.3.0-19-generic #20-Ubuntu SMP Fri Oct 18 09:04:39 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux
$ ls -la /lib/modules/`uname -r`/kernel/drivers/char/tpm
total 172
drwxr-xr-x 3 root root  4096 Okt 22 10:58 .
drwxr-xr-x 9 root root  4096 Okt 22 10:58 ..
drwxr-xr-x 2 root root  4096 Okt 22 10:58 st33zp24
-rw-r--r-- 1 root root 11737 Okt 18 10:17 tpm_atmel.ko
-rw-r--r-- 1 root root 11697 Okt 18 10:17 tpm_i2c_atmel.ko
-rw-r--r-- 1 root root 16473 Okt 18 10:17 tpm_i2c_infineon.ko
-rw-r--r-- 1 root root 22721 Okt 18 10:17 tpm_i2c_nuvoton.ko
-rw-r--r-- 1 root root 22177 Okt 18 10:17 tpm_infineon.ko
-rw-r--r-- 1 root root 17017 Okt 18 10:17 tpm_nsc.ko
-rw-r--r-- 1 root root 11617 Okt 18 10:17 tpm_tis_spi.ko
-rw-r--r-- 1 root root 17361 Okt 18 10:17 tpm_vtpm_proxy.ko
-rw-r--r-- 1 root root 14585 Okt 18 10:17 xen-tpmfront.ko
$ ps -aux|grep tpm_dev
root       140  0.0  0.0      0     0 ?        I<   12:52   0:00 [tpm_dev_wq]
$ ls -lart /sys/class/tpm/tpm0/
total 0
drwxr-xr-x 2 root root    0 Okt 22 13:22 ppi
drwxr-xr-x 2 root root    0 Okt 22 13:22 power
lrwxrwxrwx 1 root root    0 Okt 22 13:22 device -> ../../../MSFT0101:00
-r--r--r-- 1 root root 4096 Okt 22 13:22 dev
-rw-r--r-- 1 root root 4096 Okt 22  2019 uevent
lrwxrwxrwx 1 root root    0 Okt 22  2019 subsystem -> ../../../../../class/tpm
drwxr-xr-x 3 root root    0 Okt 22  2019 ..
drwxr-xr-x 4 root root    0 Okt 22  2019 .

* The command  sudo tpm2_nvlist gives lots of output

However, I haven't succeeded in enabling Secureboot and TPM 2.0 at the
same time.... On my laptop, I have to choose to either enable Secureboot
or enable TPM 2.0, not both.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to grub2 in Ubuntu.
https://bugs.launchpad.net/bugs/1848892

Title:
  "error: Unknown TPM error." after upgrading to grub 2.04

Status in grub2 package in Ubuntu:
  Confirmed

Bug description:
  After upgrading to eoan today (via `do-release-upgrade -d`), my laptop
  failed to boot into the OS. I got the grub 2.04 screen (showing only
  Ubuntu), but selecting that gave me about 20 lines of "error: Unknown
  TPM error.", followed by "error: you need to load the kernel first"
  and no way to proceed/recover. Advanced options didn't work either.
  Dropping into the grub console and writing a simple command like `set
  root=(hd1,gpt5)` failed again with a TPM error. It goes without saying
  that booting had worked before with disco/grub 2.02.

  As a workaround, I eventually managed to boot using an eoan live CD,
  chroot'ed into my system, added the `disco main` repo, and forcefully
  downgraded to disco's 2.02. After reinstalling grub to the efi
  partition, booting finally worked again (with grub 2.02).

  lsb_release -rd
  Description:	Ubuntu 19.10
  Release:	19.10

  apt-cache policy grub-efi
  grub-efi:
    Installed: 2.02+dfsg1-12ubuntu2
    Candidate: 2.04-1ubuntu12
    Version table:
       2.04-1ubuntu12 500
          500 http://ubuntu.inode.at/ubuntu eoan/main amd64 Packages
   *** 2.02+dfsg1-12ubuntu2 500
          500 http://ubuntu.inode.at/ubuntu disco/main amd64 Packages
          100 /var/lib/dpkg/status

  ProblemType: Bug
  DistroRelease: Ubuntu 19.10
  Package: grub-efi 2.02+dfsg1-12ubuntu2
  ProcVersionSignature: Ubuntu 5.3.0-18.19-generic 5.3.1
  Uname: Linux 5.3.0-18-generic x86_64
  NonfreeKernelModules: zfs zunicode zavl icp zcommon znvpair
  ApportVersion: 2.20.11-0ubuntu8
  Architecture: amd64
  CurrentDesktop: ubuntu:GNOME
  Date: Sat Oct 19 23:20:07 2019
  InstallationDate: Installed on 2017-03-05 (958 days ago)
  InstallationMedia: Ubuntu 16.04.2 LTS "Xenial Xerus" - Release amd64 (20170215.2)
  SourcePackage: grub2
  UpgradeStatus: Upgraded to eoan on 2019-10-19 (0 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1848892/+subscriptions

More information about the foundations-bugs mailing list