[Bug 1909734] Re: TPM PCR checking will fail if the all characters are 0

[Mario Limonciello]

#2 has linked the correct commit for 1.5.x version, which is already present in Hirsute.
1.4.x and 1.3.x don't have tagged releases with the commit but the commit is present on the stable trees for those releases:

For 1_4_X (groovy):
https://github.com/fwupd/fwupd/commit/a3d85438b70dfb60d410f83d6beab2ed377e924c

For 1_3_x (focal):
https://github.com/fwupd/fwupd/commit/0d091efff1b421929e245aa4e8fcee2387689fe6

** Also affects: fwupd (Ubuntu Hirsute)
   Importance: Undecided
       Status: New

** Also affects: fwupd (Ubuntu Groovy)
   Importance: Undecided
       Status: New

** Also affects: fwupd (Ubuntu Focal)
   Importance: Undecided
       Status: New

** Changed in: fwupd (Ubuntu Hirsute)
       Status: New => Fix Released

** Changed in: fwupd (Ubuntu Groovy)
       Status: New => Triaged

** Changed in: fwupd (Ubuntu Focal)
       Status: New => Triaged

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to fwupd in Ubuntu.
https://bugs.launchpad.net/bugs/1909734

Title:
  TPM PCR checking will fail if the all characters are 0

Status in OEM Priority Project:
  Triaged
Status in fwupd package in Ubuntu:
  Fix Released
Status in fwupd source package in Focal:
  Triaged
Status in fwupd source package in Groovy:
  Triaged
Status in fwupd source package in Hirsute:
  Fix Released

Bug description:
  In some of HP platforms, the TPM PCR checking will fail on focal
  ubuntu

  $ fwupdmgr get-devices
  ...
  └─System Firmware:
        Device ID: c8489035f8df6f87a1a3cd1baff36129262a5ac1
        Current version: 92.1.0
        Minimum Version: 0.0.1
        Vendor: HP (DMI:HP)
        Update Error: TPM PCR0 differs from reconstruction, please see https://github.com/fwupd/fwupd/wiki/TPM-PCR0-differs-from-reconstruction
        GUID: 116180f2-105d-4ab2-809e-7fabed71217b
        Device Flags: • Internal device
                             • Updatable
                             • Requires AC power
                             • Needs a reboot after installation
                             • Cryptographic hash verification is available
                             • Device is usable for the duration of the update

        Update Error: TPM PCR0 differs from reconstruction, please see
  https://github.com/fwupd/fwupd/wiki/TPM-PCR0-differs-from-
  reconstruction

  ---

  This issue is fixed by upstream commit
  https://github.com/fwupd/fwupd/pull/2394/commits/e265dd1d8687965bee77259ef3482b09b92033c1

To manage notifications about this bug go to:
https://bugs.launchpad.net/oem-priority/+bug/1909734/+subscriptions