New Releases of Open Platform Trust Services

openpts-0.2 - openpts-0.2.6

Seiji Munetoh (munetoh) — Thu, 05 Jan 2012 09:37:00 GMT

ReleaseNote

OpenPTS version 0.2.6

- Improves error handling and command usages.
- Improves console and logging messages.
- Added NLS support by catgets (experimental)
- Added automatic manifest update capability (experimental).
- Update IF-M messages.
- Added UEFI BIOS validation models.
- Update all validation models.
- Added man pages.
- Tested by RHEL6 and Fedora16

Important: IF-M massages are changed. please update both collector and verifier to v0.2.6. The interoperability between v0.2.5 and v0.2.6 is limited.

openpts-0.2 - openpts-0.2.5

Seiji Munetoh (munetoh) — Wed, 20 Jul 2011 03:13:00 GMT

ReleaseNote

* New PEN of OpenPTS has been assigned, the number is 38158 (0x00950E)
* Added support of TNC IMV/IMC modules
* Added core library, libopenpts.so. this shared by all commands and IMV/IMC modules
* Cleaner IF-M for Standalone and TNC operations
* Added validation model for New UEFI BIOS of Lenovo
* Fixed issues reported by coverity scan

openpts-0.2 - openpts-0.2.4

Seiji Munetoh (munetoh) — Fri, 06 May 2011 06:08:00 GMT

ReleaseNote

Sorry, There is no interoperability of the standalone IF-M operation between version 0.2.3 and 0.2.4.
Since from this version, standalone IF-M using "ptscd" daemon and SSH tunnel are deprecated, and new "ptsc" command and simple remote execution through SSH used for the standalone IF-M.
This change simplifies the configuration and operation of standalone IF-M.

In addition OpenPTS experimentally supports a remote attestation against DRTM by intel TXT and tboot.
New command, "tboot2iml" creates pseudo TCG BIOS style eventlog from tboot log and local files.

Also Java verifier is available for many type of admin host. It supports both CUI and GUI.

ChangeLog

* tested on RHEL6 x86_64, Fedora 15 x86_64
* add tboot support
* changed IF-M standalone mode, SSH tunneling => SSH remote command execution
* deprecated ptscd daemon => ptsc
* added ptsc command
* added tpm_readpcr tpm_extendpcr commands
* added tboot2iml command to convert the tboot event msg to TCG eventlog
* update iml2text command
* added FSM models for tboot (PCR17-19)
* added config flag 'tpm.quote.type=quote|quote2'
* rename config flag 'platform.model' => 'rm.model.0'
* rename config flag 'runtime.model' => 'rm.model.1'
* added config flag 'ir.dir' to set where the collector stores IRs
* added config flag 'ifm.timeout' to set the timeout of IF-M pipe through SSH
* Java verifier (jOpenPTS package)

openpts-0.2 - openpts-0.2.3

Seiji Munetoh (munetoh) — Thu, 10 Mar 2011 06:27:00 GMT

ReleaseNote

New OpenPTS (version 0.2) is written in C and designed to manage remote platform by using TPM oriented attestation. It contains both collector and verifier of PTS. Please see the user's guide for details.

It was tested on Atmel TPM and RHEL6(x86_64) and not tested well on other TPMs and OSes.
If you have any problems, please bring your report to mailing-list or issue the ticket.

ChangeLog

- written in C
- PTS collector (daemon) for target platform
- PTS verifier to validate targets
- Attestation by IF-M
- Management of Reference Manifests

GRUB-IMA - 1.1.0.0 Fedora 10&12

Seiji Munetoh (munetoh) — Mon, 01 Jun 2009 03:05:00 GMT

ReleaseNote

GRUB-IMA 1.1.0.0 patch for Fedora 10. it does not support trusted boot on (U)EFI platform yet.

ChangeLog

grub-0.97-62.fc12.ima-1.1.0.0.patch
-Adjust patch to fit source tree at Fedora12
-Add blank IMA functions to efi/efimisc.c for EFI platform to build.

grub-0.97-38.fc10.ima-1.1.0.0.patch
-Adjust patch to fit source tree at Fedora10

GRUB-IMA - 1.1.0.0 Ubuntu Intrepid (8.10)

Seiji Munetoh (munetoh) — Sun, 15 Feb 2009 00:42:00 GMT

ReleaseNote

GRUB-IMA patch for Ubuntu Intrepid (8.10)

ChangeLog

just fixed configure.ac and stage2/builtins.c patches to fit the Ubuntu distribution

openpts-tools - 0.1.2

Seiji Munetoh (munetoh) — Wed, 13 Aug 2008 01:40:05 GMT

ChangeLog

- fix tpm/tpm_createkey.c
- fix tpm/tpm_quote.c

openpts-tcdemo - 0.1.2

Seiji Munetoh (munetoh) — Wed, 13 Aug 2008 01:39:24 GMT

ChangeLog

- add comandline tools
- update/fix the Makefile
- update tcdemo properties, set new validation server address
- use service.properties by both client and server
- set ditro type and version in tcdemo.properties. e.g.
distro.type=knoppix
distro.version=531

openpts - 0.1.2

Seiji Munetoh (munetoh) — Wed, 13 Aug 2008 01:38:33 GMT

ChangeLog

- fix the grub pcr5 behevior model