Hi all,

Sorry if my questions look too simple but there still things I do not understand:

GPG keys:
Is there any GPG keys compatibility list? Is the Nitrokey U2F compatible with heads?
Is specificaly this key: https://docs.puri.sm/PureBoot/Heads.html compatible?
Is there any limitation or keys that are know not working with heads?

OTP apps:
Is there only google code app how

Bill's already done this for the tools. It's better than writing troff by hand and the user experience is way better than md2man-roff. This looks like the right tool for the job.

The manpage -L description isn't very helpful. Expand this so folks know where to go poke around to generate a policy file.

Maybe for things that take -L make sure an example exists.

The tpm_rng kernel module was removed raspberrypi/linux@6e592a0.

To still use the TPM as hwrng device you need to change the value of '/sys/class/misc/hw_random/rng_current' to the desired value.
To do so:

1. Check if the TPM is available:
   # cat /sys/class/misc/hw_random/rng_available
   The output should look like this:

Establish if Keylime can be run on Fedora CoreOS and what the state of TPM support is.

Experiment if we can provision Keylime with the ignition template system:

https://fedoramagazine.org/introducing-fedora-coreos/

I created a rsa key using the following command in a Makefile:
tpm2tss-genkey -a rsa -s $(GENRSA_NUMBITS) $(PRIVATE)/$@
The created file looks like:

-----BEGIN TSS2 PRIVATE KEY-----
Something
-----END TSS2 PRIVATE KEY-----

Then I tried to import the key using tpm2_ptool into the token I mentioned in #480
This led to an error:

sudo ./tpm2_ptool import --userpin **** --pri

This issue covers documenting the user-facing interfaces added to the project as part of the flight recorder milestone. This could be as simple as adding documentation for a command line option to the existing man pages. Additional documentation on the wiki w/r/t the design of the feature would also be welcome.

If the system crashes for some reason the shared memory map files are left around.. these should probably be removed, or documented so that the end user can trouble shoot a startup problem.

1. Determine current behavior when a SHM already exists
2. Determine best course of action based on 1

https://sourceforge.net/p/opencryptoki/bugs/14/

In the README.md it is the IBM simulator linked ...
google/go-tpm-tools@de523c4

Should the link forward to: https://github.com/Microsoft/ms-tpm-20-ref/ ?

Is the "Microsoft Simulator" a real simulator, or just a library/wrapper to write own little simulators in unit-test?

meta-tpm2/recipes-tpm/tpm2-tools/tpm2-tools.inc needs to inherit bash-completion.

Bitbake produces the following warnings otherwise:
WARNING: tpm2-tools-git.AUTOINC+e3a2fcf720-r0 do_package: QA Issue: tpm2-tools: Files/directories were installed but not shipped in any package:
/usr/share
/usr/share/bash-completion
/usr/share/bash-completion/completions
/usr/share/bash-completion/co

acm.HeaderLen must be a multiple of 4, not 64, see Software development guide, "Appendix A Intel ® TXT Execution Technology Authenticated Code Modules".