[UC20, FDE/tpm2] Failed to start the-tool.service

[Jerry Lee]

Hi,

I met the problem as the title .

After installing the UC-20 image on a machine which enabled "secure boot" and "TPM", the problem happened as the attached picture "fde-err.jpg" shown.
I tried to trace call sequence for the error messages:
* Error locking access to sealed keys
* : cannot execute hash sequence
* : cannot unmarshal response parameters for command TPM_CC_EventSequenceComplete
* : cannot unmarshal argument at index 0
* : cannot process list
* tpm2.TaggedHashList: cannot process element at index 3 from list type
* tpm2.TaggedHashList: cannot process custom type tpm2.TaggedHash, inside container type
* tpm2.TaggedHashList: cannot determine digest size for unknown algorithm 0x0027

I heard that there is a possible fix for this issue: https://github.com/canonical/go-tpm2/commit/5dae48dcf931df13f2e4e13de98cbfb7c4170500

Therefore, I tried the snapd=latest/edge, but I still saw this problem.

The snap listed in my tested core-20 image:

$ snap list
Name Version Rev Tracking Publisher Notes
core20 20210416 1002 latest/edge canonical* base
pc 20-0.4 115 20/edge canonical* gadget
pc-kernel 5.4.0-72.80.1 761 20/edge canonical* kernel
snapd 2.49.2+git1345.g13723e8 11805 latest/edge canonical* snapd

Can we know if the mentioned fix for "go-tpm2" has been included in the snapd version "2.49.2+git1345.g13723e8" ?

Thanks

[Jerry Lee (jerry-lee-tpe)]

The TPM/FDE issue is still seen with the tested core20 image using the latest snapd "2.50+git1445.gf95303e" :

$ snap list
Name Version Rev Tracking Publisher Notes
core20 20210427 1015 latest/edge canonical* base
pc 20-0.4 115 20/edge canonical* gadget
pc-kernel 5.4.0-73.82.1 767 20/edge canonical* kernel
snapd 2.50+git1445.gf95303e 11856 latest/edge canonical* snapd

[Jerry Lee (jerry-lee-tpe)]

The TPM/FDE issue is resolved after using snapd 2.51 :

$ snap list
Name Version Rev Tracking Publisher Notes
core20 20210429 1026 latest/beta canonical* base
pc 20-0.4 115 20/beta canonical* gadget
pc-kernel 5.4.0-75.84.1 780 20/beta canonical* kernel
snapd 2.51 12159 latest/beta canonical* snapd

This issues can be closed.