TPM FDE not available on TPM 1.2

[Niklas Sombert]

I was trying to install Ubuntu 23.10 with TPM FDE on my old laptop (ThinkPad 11e Gen 2). In the relevant popup, the option is grayed out with the following message:

not encrypting device storage as checking TPM gave: cannot connect to TPM device: cannot initialize TPM connection: cannot create HMAC session: TPM returned an invalid response for command TPM_CC_StartAuthSession: cannot unmarshal response packet: unexpected TPM1.2 response code 0x0000000a

I'm not sure whether this should work, feel free to close if you're going to require TPM 2.0, but I didn't find that information anywhere.

ProblemType: Bug
DistroRelease: Ubuntu 23.10
ProcVersionSignature: Ubuntu 6.5.0-9.9-generic 6.5.3
Uname: Linux 6.5.0-9-generic x86_64
NonfreeKernelModules: zfs
ApportVersion: 2.27.0-0ubuntu5
Architecture: amd64
CasperMD5CheckResult: pass
CasperVersion: 1.486
CloudArchitecture: x86_64
CloudID: nocloud
CloudName: unknown
CloudPlatform: nocloud
CloudSubPlatform: seed-dir (/var/lib/cloud/seed/nocloud)
CurrentDesktop: ubuntu:GNOME
Date: Thu Oct 26 17:53:58 2023
LiveMediaBuild: Ubuntu 23.10.1 "Mantic Minotaur" - Release amd64 (20231016.1)
ProcEnviron:
 LANG=C.UTF-8
 PATH=(custom, no user)
 SHELL=/bin/bash
 TERM=xterm-256color
 XDG_RUNTIME_DIR=<set>
Snap: ubuntu-desktop-installer 0+git.1c719695 (latest/stable)
SnapChanges:
 ID Status Spawn Ready Summary
 4 Done 2023-10-26T17:50:33Z 2023-10-26T17:50:53Z Refresh "ubuntu-desktop-installer" snap
SnapConnections:

SnapSource: ubuntu-desktop-installer
SubiquityLog: Error: [Errno 13] Permission denied: '/var/log/installer/subiquity-server-debug.log.5490'
UpgradeStatus: No upgrade log present (probably fresh install)

[Niklas Sombert (ytvwld)]

This still happens on Ubuntu 24.04, but the error message is more non-descript.
I'm able to proceed through the whole wizard, but the installation itself immediately fails with "something went wrong". And the log is not that helpful either:

Apr 15 10:48:02 xubuntu subiquity_event.3372[3372]: subiquity/Early/apply_autoinstall_config:
Apr 15 10:48:02 xubuntu subiquity_event.3372[3372]: subiquity/Early/apply_autoinstall_config:
Apr 15 10:48:02 xubuntu subiquity_event.3372[3372]: subiquity/Reporting/apply_autoinstall_config:
Apr 15 10:48:02 xubuntu subiquity_event.3372[3372]: subiquity/Reporting/apply_autoinstall_config:
Apr 15 10:48:02 xubuntu subiquity_event.3372[3372]: subiquity/Error/apply_autoinstall_config:
Apr 15 10:48:02 xubuntu subiquity_event.3372[3372]: subiquity/Error/apply_autoinstall_config:
Apr 15 10:48:02 xubuntu subiquity_event.3372[3372]: subiquity/Userdata/apply_autoinstall_config:
Apr 15 10:48:02 xubuntu subiquity_event.3372[3372]: subiquity/Userdata/apply_autoinstall_config:
Apr 15 10:48:02 xubuntu subiquity_event.3372[3372]: subiquity/Package/apply_autoinstall_config:
Apr 15 10:48:02 xubuntu subiquity_event.3372[3372]: subiquity/Package/apply_autoinstall_config:
Apr 15 10:48:02 xubuntu subiquity_event.3372[3372]: subiquity/Debconf/apply_autoinstall_config:
Apr 15 10:48:02 xubuntu subiquity_event.3372[3372]: subiquity/Debconf/apply_autoinstall_config:
Apr 15 10:48:02 xubuntu subiquity_event.3372[3372]: subiquity/Kernel/apply_autoinstall_config:
Apr 15 10:48:02 xubuntu subiquity_event.3372[3372]: subiquity/Kernel/apply_autoinstall_config:
Apr 15 10:48:02 xubuntu subiquity_event.3372[3372]: subiquity/Zdev/apply_autoinstall_config:
Apr 15 10:48:02 xubuntu subiquity_event.3372[3372]: subiquity/Zdev/apply_autoinstall_config:
Apr 15 10:48:02 xubuntu subiquity_event.3372[3372]: subiquity/Ad/apply_autoinstall_config:
Apr 15 10:48:02 xubuntu subiquity_event.3372[3372]: subiquity/Ad/apply_autoinstall_config:
Apr 15 10:48:02 xubuntu subiquity_event.3372[3372]: subiquity/Late/apply_autoinstall_config:
Apr 15 10:48:02 xubuntu subiquity_event.3372[3372]: subiquity/Late/apply_autoinstall_config:
Apr 15 10:50:57 xubuntu subiquity_event.3372[3372]: subiquity/Ad/has_support_GET:

[James Paton-Smith (jamesps)]

The TPM version should be pretty easy to detect by the installer. Even if TPM 1.2 is not supported, I would imagine an error/warning notification is possible.

TPM version can be found at /sys/class/tpm/tpm0/tpm_version_major